curl: curl -OJ allows creating custom .curlrc file which allows exfiltrating private data, among other things