I had a look under the hood of browser-use. I wanted to to run some tests with a local browser and a trusted LLM provider of my choice, but the (enabled by default) telemetry they send to PostHog is CRAZY. Especially the browser-harness component can leak credentials to PostHog left and right.
This is absolutely not cool.