[heuiop]

It's not just spying. It's also unilateral actions like the recent 'trivial subdomains' example:

https://bugs.chromium.org/p/chromium/issues/detail?id=881410

https://bugs.chromium.org/p/chromium/issues/detail?id=883038