Is Destiny 2 Season Pass Wayback Machine safe?

Destiny 2 Season Pass Wayback Machine ships a hardcoded Bungie Platform API key in its extension bundle.

The extension includes a hardcoded x-api-key value in its content script that is sent with every request to www.bungie.net/Platform/Destiny2/. Because the key is a plain string literal in the packaged XPI, anyone who downloads the extension can extract it. No user data is collected or transmitted beyond what is required to call the Bungie Platform API.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.