You brought it up before but what’s wrong with IsolateDestAddr and IsolateDestPort?
Unless someone uses a browser that way the performance impact shouldn’t be crippling. Enabling it for browser’s slows things down because every webpage resource and ad from a different domain opens up additional circuits.