Is Quillbot: AI Writing Assistant to Grammar Check, Paraphrase & Translate safe?

!function(e) {
  Nn().runtime.onMessageExternal.addListener(function(t, n, r) {
    switch (t.action) {
      case In.EXTERNAL_MSG_DETECT:
        jn("deviceID").then(function(e) {
          r({
            deviceID: e,
            success: !0,
            version: Nn().runtime.getManifest().version
          })
        });
        break;
      case In.EXTERNAL_MSG_INPUT_TEXT:
        t.inputId && jn(t.inputId).then(function(e) {
          r({
            paraphraseInputText: e
          }), Nn().storage.local.remove(t.inputId)
        });
        break;
      // ... additional EXTERNAL_MSG_* cases follow, gated only by
      // manifest.json's externally_connectable.matches allowlist
    }
  })
}

Nn().cookies.getAll({
  domain: In.QB_COOKIE_INCLUDE_URL,   // "quillbot.com"
  name: In.QB_ID_TOKEN_STRING         // "useridtoken"
}).then(function() {
  var e = u(AVe().m(function e(t) {
    var n, r, i, o, a, s, u;
    return AVe().w(function(e) {
      for (;;) switch (e.n) {
        case 0:
          return e.n = 1, rre();
        case 1:
          if (n = e.v, !(t.length > 0)) { e.n = 3; break }
          return o = t[0].value, e.n = 2, Zne();
        // ... reads the cookie's value and stores it for API auth headers
      }
    })
  }())
})

// When an event fires and no hostOrigin was passed in the message,
// the service worker looks up the active tab's URL directly.
chrome.tabs.query({ active: true, currentWindow: true }).then((tabs) => {
  let urlContext = {};
  if (!hostOrigin && tabs[0]?.url) {
    const parsed = new URL(tabs[0].url);
    urlContext = {
      hostOrigin: parsed.origin,   // e.g. 'https://www.google.com'
      hostUrl:    parsed.href      // e.g. 'https://www.google.com/search?q=...'
    };
  }
  const payload = {
    authenticated,      // true/false
    'anon-id': anonId,  // persistent anon device ID
    premium,            // paid plan flag
    appMode,            // 'Extension'
    extensionType,
    hostOrigin,         // from caller or active tab
    hostUrl,            // from caller or active tab
    product,
    'platform-version': manifestVersion,
    ...urlContext
  };
  tracker.sendUserMetricEvent({ userID, action: eventName, value: payload });
});

// Collector endpoint (production) and buffer config:
const collectorUrls = { production: 'https://ol-collector.quillbot.com' };
const config = {
  bufferSize:          1_000_000, // 1 MB before forced flush
  flushIntervalMillis: 15_000,    // flush every 15 seconds
  namespace:           'com.quillbot.extension',
  storageType:         'CHROME',  // backed by chrome.storage
};

// M is the QuillBot extension id 'oldceeleldhonbafppcapldpdifcinji'
window._docs_annotate_canvas_by_ext = M;

// Five canvas drawing primitives are replaced with wrappers that record
// stroke geometry (used to draw grammar underlines over the Docs canvas):
const origMoveTo = CanvasRenderingContext2D.prototype.moveTo;
CanvasRenderingContext2D.prototype.moveTo = function (x, y) {
  lastPoint.set(this, { x, y });
  origMoveTo.call(this, x, y);
};
// ...lineTo, fillRect, clearRect and stroke are wrapped the same way...

// Acquire a handle on the live document text via the undocumented Docs API:
async function initializeAnnotateAPIGetter(extId) {
  if (typeof self._docs_annotate_getAnnotatedText !== 'function') return;
  const annotated = await self._docs_annotate_getAnnotatedText(extId);
  if (annotated && typeof annotated.getText === 'function')
    getFullTextFn = annotated.getText.bind(annotated);      // whole document
  if (annotated && typeof annotated.getSelection === 'function')
    getSelectionFn = annotated.getSelection.bind(annotated); // current selection
}

// The content script (isolated world) dispatches 'qb-gdocs-getFullText'.
// The injected page-world script answers by reading the whole document
// and dispatching 'qb-gdocs-fullText' with the text as the event detail:
document.addEventListener('qb-gdocs-getFullText', () => {
  const fullText = getDocumentText();           // getText() or KX_kixApp walk
  dispatchCustomEvent(document, 'qb-gdocs-fullText', { text: fullText });
});