Build guest webPreferences from an allowlist instead of patching a few fields.

Only attach a webview from the app's main frame.

Never auto-select a client certificate for websites.

Downloads always need an explicit save.

Add "Clear browsing data" for the browser session.

Archived drafts should not load remote images in the app window. Store captured images locally instead.

Branch: feat/integrated-browser