My bad, it does not appear to be hitting the safe browsing service on every request but just a few times soon after the first request of a session. I guess it's

My bad, it does not appear to be hitting the safe browsing service on every request but just a few times soon after the first request of a session. I guess it's probably just updating the bloom filter. They're still not off the hook for doing autocomplete on the server by default. That effectively gives them every typed in URL.