I would be unsurprised if Instagram was collecting a lot more than just this, but the web-login for Facebook used to use websockets to portscan VNC/RDP/etc port

I would be unsurprised if Instagram was collecting a lot more than just this, but the web-login for Facebook used to use websockets to portscan VNC/RDP/etc ports on localhost in addition to all the fingerprinting and enumeration, so this entire situation wasn't exactly surprising