While this is true, a parent comment from the user you're responding to has already explicitly mentioned this as a potential issue: "It won't stop a nation sta

While this is true, a parent comment from the user you're responding to has already explicitly mentioned this as a potential issue: "It won't stop a nation state modifying requests in transit and injecting their own js but it will probably stop a nosy sysadmin."