Can’t believe someone flagged this, thanks for actually looking into it.

Never believe “nothing leaves your browser” unless it’s a locally saved SPA and the network is unplugged.