aaronpkpcarrier: that's a requirement from the FedCM spec. It's to prevent IdPs from essentially using infinite subdomains to track users. A lot of the motivation of this spec is preventing tracking that is currently being done with 3rd party cookies and long redirect chains.
