Actually it happens really frequently. Unless the application is open source you literally have no idea what it’s doing and corporations 100% take advantage of that fact.

Same level of paranoia that makes someone check the dev tools for data transfers in the first place.