Really? Why would they fire that off from the client as a separate call? Thanks for the heads’ up, will check out.
(And 'they' here might mean the company as an abstract entity, or perhaps just the engineer put in charge of implementing this feature?)
There's a browser plugin called DeMod or something that disables it but I don't know how well it works.