Please include controls to protect against websites that hijack controls such as shown on this page:
https://underpassapp.com/StopTheMadness/test.html
And blocked by this extension:
https://underpassapp.com/StopTheMadness/
However, blocking ill-behaved websites shouldn't require an extension but should be builtin like like the existing protections against AutoPlay, Tracking Prevention, etc.
Then like existing controls under Websites, it should be possible to enable/disable these blocks on a site-by-site basis. For example, I might want the default (likely in effect when visiting unknown websites) to have block all these hijacks, while I might have a special case for the domain hosting Google Docs to let it override some things for usability reasons.