I turned sample submission off permanently via group policy after catching defender uploading places.sqlite out of my Firefox profile.