yeah
Discussion
That's like giving your bitcoin private key to buy some bitcoin. This site might not be malicious but another one might be selling or giving away your key.
You can buy a coupon without giving up your Mullvad receipt
https://vpn.sovereign.engineering/account?is_hidden=dummyyes
I hope that is what jb did.