it's straight up data exfiltration and should be illegal