Hello,
Thank you for thinking about us ;-)
PHPSESSID is not set up by either us or Xdebug. Basically, it's in the power of the developer/admin to deal with this.
On PHP 7.3 and higher, SameSite
attribute can be set up in php ini option: session.cookie_samesite
Cheers!