Private State Token Exhaustion section in explainer is out of date. Update with the current token exhaustion mitigations from the spec.

Link to relevant discussion in blink-dev list https://groups.google.com/a/chromium.org/g/blink-dev/c/5jI8kLLdIFw/m/_810WhKGAwAJ