Good question. First off, the idea is you would only do this with people you trust. To connect and tab share with someone, you would need to send and/or accept

Good question. First off, the idea is you would only do this with people you trust. To connect and tab share with someone, you would need to send and/or accept an email invitation. It’s not an IT product. It’s intended for friends and family. The mirrored page has a full copy of the DOM. So yes, if that includes input fields with sensitive information, the mirrored user could see that in Dev tools. But there is no easy way them to submit a form. Pointer events are disabled on the mirror and the Javascript of the original page is not loaded.