Yes, and definitely. Here's an example from the NanoBlock vs uBlock Origin controversy where cookies and private data were being harvested
https://github.com/NanoAdblocker/NanoCore/issues/362#issueco...
Assume that any time an app has privilege to access your data, they are going to do it either deliberately or accidentally.