It looks like on iOS with an iPhone X running 11.4 - in Private Browsing mode the Laravel cookies XSRF-TOKEN and laravel_token (from Passport) are not being set. They are set correctly on Private Browsing on Safari Version 11.0.1 with MacOS.
Nothing in the console.
Interestingly, iOS does show the {app-name}_session cookie as set, as well as all Google Analytics cookies, just not the other cookies.
What gives? How do I even start to debug this?