Why would it need to send the passwords? Could it not download a list of a every site that has ever been hacked along with their domain list and the date of th

Why would it need to send the passwords? Could it not download a list of a every site that has ever been hacked along with their domain list and the date of the hacking, then warn you if you have a saved password for one of those domains that was saved before the domain was hacked? Because that's what it does.