Hacker News Reader

So now we're assuming that the Netflix app does not know which domain it considers safe?

Think of an app that allows user generated content

There is already the ability to establish "associated domains" for the apps which establishes a special relationship between them.