Comment by mrec

Hmm, not immediately clear how this avoids potential privacy leaks, such as drawing DOM hyperlinks to the canvas and then scraping their visited-status colour from the pixel data.

Or maybe I'm behind the times; I've not done serious webdev for a long time.