Also, for additional security, you should be able to disable it on your own mobile device. Although being stripped, the host could be collecting it (I am not but it is possible, likely Facebook and Twitter use it before stripping).

If #[2]​ can add an additional layer and confirm/strip that would be a triple secure banger.