One could run every tab / sub-process within a container with its own networking stack.

It is complex, but doable.