Comment by ErikD

That's what https is for. It should prevent them from doing anything useful with the packets.