@privacybrowser How?
Because the only real way of being sure the hostname matches is to be able to check for a match.

I don't mean a requirement on auto-filling information by the way, those ought to not exist due to things like JavaScript and hidden forms.