"Research has shown that users are already desensitized to privacy and security warnings." This along with the quote below are my biggest takeaways from this a

"Research has shown that users are already desensitized to privacy and security warnings." This along with the quote below are my biggest takeaways from this article: "it can be difficult to avoid information leakage through URLs or cookies or more sophisticated attacks." People may not even realize they are giving the keys away until it's too late. It's unlikely that a dialog box for confirmation would be explicit anyway, especially if Ancestry and others stand to monetarily gain from your DNA. Moreover, if you're a malicious actor you can simply display an ad from Ancestry and when you have a logged in user you could potentially identify a whole host of other information that can be associated with their email and other aspects of their identity. The malicious actor could resell this to even worse offenders.