Yes, and I'm glad I can at least now tell such sites from others. Not allowing such malicious compliance would be better, but this is still an improvement over websites stealing data with no way of telling it happens