Comment by mattlondon

You need to go more tin-foil-hat

Its not just JavaScript, it's cookies, it's "auto loading" resources (e.g. 1x1 pixels with per-request unique URLs), it's third-party http requests to other domains (which might art cookies too).

I think the XKCD comic about encryption-vs-wrench has never been more apt for Gemini the protocol...