The iframe below is sandboxed without allow-storage-access-by-user-activation. The embedder explicitly withheld SAA from this frame, yet user activation inside it still renews the unpartitioned STORAGE_ACCESS grant.
allow-storage-access-by-user-activation