@aral it seems shocking that one could easily write a bug that shares state outside your machine. Sounds like a footgun. Can there be some kind of more explicit mechanism where you mark consent for content to be shared over the network, and unmarked content warns or errors out?