Shame it requires lax security to work. You can however get around this by adding Allow exceptions for the following hosts:
https://.www.evernote.com
https://www.evernote.com
https://evernote.com
https://ws.www.evernote.com
https://www.evernote.com

Then it works even if third party cookies are disabled.