Until Google decides whether and how to patch, it seems blocking all third-party iframes can mitigate this issue, using this uBlock Origin rule:

||*^$subdocument,third-party