I disagree; report it to circle, if they fix then you can write the story on how it's a massive problem, how they fixed and people can learn. We learnt basically shit from this: nothing about how it's fixed or is avoided.
If I did that, no one today would be opening the Network tab on apps/credit card forms they care about and wondering whether third parties could steal the data.