Technically it's not a lie. Loopback traffic can be sniffed by any process, malicious or not