> whitelisting the domain isn't a great solution because then that means they can drop any 3rd party cookies, not just the desirable ones
Try something like uMatrix or similar add-ons. They allow you to configure rules similar to application firewalls:
cookie * * DENY
cookie * 1stparty ALLOW
cookie creditunion.org finserv.com ALLOW
Great interface too, at least what I've seen on uMatrix: Most rules are configured with one click in a 'matrix' of hosts and applications.