The doc addresses some concerns, but leaves what I think is the biggest issue (disclosure of information on a page, e.g. "send user to URL that searches gmail f

The doc addresses some concerns, but leaves what I think is the biggest issue (disclosure of information on a page, e.g. "send user to URL that searches gmail for from:hiring@snap.com; look for 'No emails are found'") completely unaddressed.