I was imagining for a bad behaved site run it in a cgroup but it would be better if the browser did that per tab