The feature in question is the ability to use fragment (# in a URL) to link to matching text rather than just an ID. Here is the key line with the so-called pri

The feature in question is the ability to use fragment (# in a URL) to link to matching text rather than just an ID. Here is the key line with the so-called privacy concern. "Consider a situation where I can view DNS traffic (e.g. company network), and I send a link to the company health portal, with [the anchor] #:~:text=cancer. On certain page layouts, I might be able [to] tell if the employee has cancer by looking for lower-on-the-page resources being requested.” So they could send someone a link to a page with a fragment, trick them into clicking it, and matching text and watch for DNS requests being lazy-loaded to learn the fact that they clicked it. It's convoluted nonsense.