[dsr_]

The obvious two: Optimal gets to see every domain name your computer asks for, including personalized domains like yourname.bloggingservice.com; Optimal gets to answer those requests in any way it wants to (MITM attacks).