They do have access. Whether they use it or not... not sure. It would be interesting to check. I assume everything in the same browser profile is compromised either on purpose or by accident.