So they can capture things like your bank account user name and password, even if you use a password safe?
“So they can capture things like your bank account user name and password, even if you use a password safe?”
A password safe might help. But for those who don’t use one they are gathering your credentials and IP of the sites you are in. And because they are over your shoulder riding in with you they very well could be gathering even more data.
It is not good. There should not be a second IP address from Google attached to yours when you are logging in other sites thinking you are secure. I suspect this second IP address is a real time direct API connection to Google.