Silently harvesting saved browser passwords, cryptocurrency wallets, and session cookies. 2. Legal and Compliance Consequences