For privacy, I use first-party isolation. The effect is that all domains get their own container. In day-to-day use I haven't seen any sites that don't work with it enabled.
Specified sites can still be opened in specific containers, and not be trashed.
Also, it didn't work on mobile.