[kayodelycaon]

There’s a huge difference from sending metadata and sending everything. Most notably in the bandwidth required.

If I’m reading this correctly, it’s not sending every password and username it discovers.

It’s invasive but not to the point of being a complete set of malware.