Common sense. One has to assume that Pocket will take the path of least resistance, seeking constant read access to the URL bar so it can perform a one-click sa

Common sense. One has to assume that Pocket will take the path of least resistance, seeking constant read access to the URL bar so it can perform a one-click save. It may be possible for them to come up with a way to get the URL without having read access, perhaps by having Firefox pass the URL only when asked for by Pocket, but I saw nothing like that in the Firefox code when this partnership was first announced. Granted, I haven't looked since, but why would they change it? And since Pocket's code is proprietary and closed, there's no way to audit what they do and how they do it. So, one has to assume a lazy, insecure method on their part until they prove otherwise. Assuming benevolence and diligence from a company that is blatantly anti-open-source is foolish.