5 ms·

What if it's encrypted on the client (browser)? I'm not saying they do, but then their statement could be true.