OAuth 2.0 Hybrid App Flow Cookie Management - Can an App set cookie for a different domain?

As per new OAuth 2.0 Hybrid App flow, Salesforce returns necessary cookie names, session ids, and domain details in the response so that when app opens the web view it can directly use the session id set in the cookies and grant access to the Salesforce pages inside the App.

Reference :

https://help.salesforce.com/s/articleView?id=sf.remoteaccess_oauth_hybrid_app_flow_cookies.htm&type=5

However I was wondering whether we can set cookies on other domains than the "current" native app domain due to security reasons?

#OAuth 2.0 #Hybrid #Identity & Access Management