If you're paranoid, disable JIT.
edit: links
https://www.reddit.com/r/GrapheneOS/comments/1unhtxu/initial...
> and on top of it you’re recommending an extension as a security measure
... Yes? Why can a browser extension not be a security measure/improvement?
It can’t trick Canva into letting you use the color picker, or otherwise enable it, can it - if someone happens to know?
(What a dumb feature to be locked to the Googlesphere.)