"The debugging session below was captured after visiting a website that did this:"
In hindsight: It can be interpreted in many ways and my standpoint was too pessimistic/bold from a security standpoint.