Yes, theoretically in the case you mentioned. All responsible implementations of this won't actually log PII. It's pretty trivial to withhold certain inputs. A

Yes, theoretically in the case you mentioned. All responsible implementations of this won't actually log PII. It's pretty trivial to withhold certain inputs. All of the services mentioned in the article have easy ways to flag an input field as private / do not log. I'd wager a lot of money that these sites are interested in gathering UX data and not scraping for accidental form input. I suppose there's a certain level of trust involved, but I don't think that's any different than when you make an online purchase. /shrug