You're literally the only person in this thread trying limit the conversation to browser exploits. So your choice of wording doesn't make it any more true. > N

You're literally the only person in this thread trying limit the conversation to browser exploits. So your choice of wording doesn't make it any more true. > Note that if the aggregated user data were to be surreptitiously accessed by a third party, this WOULD be a security issue - but that isn't what we're talking about, is it? But we are talking about third parties gaining access? The mentioned Web APIs are intended for use by third parties. It's not even aggregated user data, but individual ones.