I was the CISO at a HIPAA-covered healthtech company and the opt-in feature as it was wouldn’t have bothered me at all. It adds nothing to the threat model that

I was the CISO at a HIPAA-covered healthtech company and the opt-in feature as it was wouldn’t have bothered me at all. It adds nothing to the threat model that you don’t already have with curl.