The ickier parts are on the unintended capture side, like enabling "show password" on a site doesn't affect browser history but Recall may capture it in the clear.

Or from history you may see that you accessed a site, but not what you did on it (what comments you typed for example).