[fastest963]

They definitely inject JS as we had a problem with them breaking certain JS calls with payment autofill before [1].

[1] https://x.com/jameshartig/status/1534886418266431488