Is Molly safe?

registerPageView(url, tabId) {  const entry = {    url: url = Visit.reduceUrl(url),    ts: +new Date,    tab_id: tabId  };  this._data.page_views = this._data.page_views || [];  this._data.page_views.push(entry);  this.end = +new Date;  Visit.registerChange(this);}

static reduceUrl(url) {  function reduceSegment(segment) {    segment = decodeURIComponent(segment);    if (!segment.length) return '';    if (segment.length < 5) return segment;              // short strings pass through    if (segment.match(/.*@.*\.[a-z]+/)) return '[email]';    if (segment.match(/^[a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12}/)) return '[id]'; // UUID    if (segment.match(/^https?:\/\//)) return '[url]';    // entropy check: mostly-alphabetic real words score low and are returned unchanged    let bits = 0, count = 0, prev = '^';    for (const ch of segment) {      const c = /[0-9]/.test(ch) ? '0' : ch;      if (/[a-zæøå]/i.test(c)) { bits += TRANSITION_COST[prev + c] || 18; count += 10; prev = c; }      else prev = undefined;    }    return Math.exp(count - bits) < 1 ? '[id]' : segment; // low-entropy word -> kept as-is  }  const u = new URL(url);  u.pathname = u.pathname.split(/(\/)/).map(seg => seg.match(/^(|c-\d+)$/) ? seg : reduceSegment(seg)).join('');  for (const key of u.searchParams.keys()) {    if (/variant|product/.test(key)) continue;    u.searchParams.set(key, /id|token|signature/.test(key) ? '[id]' : reduceSegment(u.searchParams.get(key)));  }  return u.toString();}

static async updateVisits(changes) {  return await this.api('updatevisits', {}, changes);}

async update() {  const linkElements = platform.findLinks();  const urls = linkElements.map(el => el.url).filter(Boolean);  if (!urls.length) return;  const siteInfo = await new Promise(resolve => {    chrome.runtime.sendMessage({ action: 'enhancer_init', links: urls }, resolve);  });}

static async linkSearch(urls, noCache) {  const cached = {};  const toFetch = {}; // domain -> [urls]  for (const url of urls) {    const domain = Site.getDomainFromUrl(url);    const cached_site = await Site.getFromDomain(domain, { no_cache: noCache, no_fetch: true });    if (cached_site) {      cached[url] = cached_site;    } else {      toFetch[domain] = [...(toFetch[domain] || []), url];    }  }  await Promise.all(Object.keys(toFetch).map(async domain => {    const site = await Site.getFromDomain(domain, { no_cache: noCache, timeout: 5000 });    if (site) toFetch[domain].forEach(url => { cached[url] = site; });  }));  return cached;}

const apiUrl = config.site_info_url + '/' + encodeURIComponent(domain);const response = await fetch(apiUrl, {  headers: { Authorization: 'basic ' + await Settings.getToken() }});

static async getDeviceInfo(forceRefresh) {  if (this._deviceInfo === undefined || forceRefresh) {    // Try native API first, fall back to storage    this._deviceInfo = await storage.get('_deviceInfo') || {};    this._deviceInfo.notification_status = this._deviceInfo.notification_status || 'default';    const platformInfo = await chrome.runtime.getPlatformInfo();    this._deviceInfo.platform = platformInfo.os;    let { install_id } = await storage.getMulti(['install_id']) || {};    if (!install_id) {      install_id = crypto.randomUUID();      storage.set('install_id', install_id);    }    this._deviceInfo.install_id = install_id;  }  return this._deviceInfo;}

static async updateSession(sessionData) {  const deviceInfo = await this.getDeviceInfo();  sessionData.device_info = deviceInfo;  return await this.api('updatesession', {}, sessionData, { ... });}