They forgot to add timing attack on images load time which can be used to tell if you visited X website.
https://www.ieee-security.org/TC/SP2011/PAPERS/2011/paper010...
Not since browsers started partitioning caches in 2020: https://developer.chrome.com/blog/http-cache-partitioning/
Not since browsers started partitioning caches in 2020: https://developer.chrome.com/blog/http-cache-partitioning/