Thank you Andrey for the helpful answers. This perfectly covers all I wanted to know.
We are developing a synthetic monitoring solution (a Puppeteer in a browser where the extension is the driver); we also offer browser clickpath recording where we do not have any control over the environment. So the external protocol client is not an option for us.
Our solution will not fully survive MV3, and we are trying to find out alternative ways to support the same set of features to our end users.
I might have a possible solution, but it is not ideal ("hacky" solution of blocking new tabs by redirecting them and navigating to the target URL once we are ready), so I was hoping "setAutoAttach" might work for us.