There are already some practical restrictions on non-127.0.0.1 http cookies. I fully expect more of this in the future. And a good thing too.