I'm running browser inside network namespace with VPN tun device, so the only address it could leak is a tunnel one.
I used that one to route all of my GMail stuff over my server. This is done transparently to Thunderbird, by launching it in its own network namespace. That way, I don't get these annoying "Someone has your password" messages when travelling.
I should generalize my stuff and push it to Github...