I’ve noticed that the security profiles partially work for popups. For example if I set a security profile to disable select text, prevent copy and disable context menu, and apply it to the particular html page when i launch the page as a popup I can still select text and use ctrl+c to copy the text.