Chrome explicitly having a line [1] of code to not send the `x-client-data` header to Yahoo made me laugh.
[1] https://chromium.googlesource.com/chromium/src/+/master/comp...
[1] https://chromium.googlesource.com/chromium/src/+/master/comp...
There's no smoking gun here, but I don't think that concern might be dismissed out of hand. It might be good to see what Yahoo's take on this. This could even evolve into participation by the US Attorney General. I'd like to know more, either way. Like if Yahoo was independently added to the list at a later date, or if it was there from the start?