I'm joking, it'd require collaboration on both ends, so it's just an ugly postmessage alternative. There's not much room for exposure to be had.
Maybe just lazy loading content that you can detect on the outside...
I'm sorry 😅 I should stop
I remember having the same thoughts on the privacy issues around cross origin but everything I could come up with they pointed out was already possible within the model they developed so I think it's actually fine.