[jeffbee]

That's why there was the recent W3C draft about Spectre and the policies around which sites can frame other sites.