Afaik they can only see unencrypted stuff if you for example login to a http website, but most websites use encryption so this is not a problem. In lightning is nothing to steal for them too.