> Chrome and Edge have been known to send the contents of <input> elements to a spellchecking service over the network, exposing whatever was in the field

One day maybe someone will write a client side spell checker that can work without sending things to a data centre to be rendered.