Even though I have zero confidence in similar claims by big and small players, in this case I would give them the benefit of the doubt and blame your browser instead, because exposing themselves in this way would be extremely stupid.