A new checkbox next to the session cookie field, off by default: on a page reached with your login cookie, click a small, bounded number of things that look like they only expand or reveal more of the page — an accordion, a "show more", a dropdown toggle — so a tool hidden behind one of them can be found too. The bar for what counts as safe to click is deliberately high: the strongest signal is aria-expanded, the standards-based marker for exactly this kind of disclosure widget, or a native <details>/<summary>. Anything that looks like a form submit, or is worded like delete, pay, invite, upgrade, log out, or similar, is never clicked, no matter what else about it looks safe.
This is opt-in on purpose — it clicks things on a real, authenticated session, so it's your call whether that's worth it for a given site, not something that happens to your account by default.