Comment by zevv

Of course also in this case it helps - sandbox it so it does not leak info between sessions. Global agent memory is like sharing your browser cookies over all domains.