Is Sweezy Custom Doodle for Google™ safe?

// Base64 decode of the obfuscated constant:// atob('YTZYQkxWR2NRVUN5VHhXTzlOdmUwUQ==') === 'a6XBLVGcQUCyTxWO9Nve0Q'const GA4_API_SECRET = 'a6XBLVGcQUCyTxWO9Nve0Q';

// Fires immediately when the popup HTML is loaded — before any user interaction.async function trackPageView() {  // Read the persistent UUID stored at install time in chrome.storage.local  const { configuration } = await chrome.storage.local.get('configuration');  const clientId = configuration.clientId; // never rotated  // Resolve or refresh a 30-day session ID  let sessionData = await getSessionData();  const now = Date.now();  const SESSION_WINDOW_MS = 43200 * 60 * 1000; // 30 days  if (!sessionData || (now - Number(sessionData.timestamp)) > SESSION_WINDOW_MS) {    sessionData = { session_id: now.toString(), timestamp: now.toString() };    await setSessionData(sessionData);  }  // Build the GA4 Measurement Protocol payload  const event = {    name: 'page_view',    params: {      session_id: sessionData.session_id,      engagement_time_msec: 100,      page_location: location.pathname, // always '/popup.html'      language: navigator.language,     // e.g. 'en-GB'      page_title: document.title    }  };  // POST to GA4 Measurement Protocol (api_secret base64-obfuscated in source)  await fetch(    `https://www.google-analytics.com/mp/collect?measurement_id=G-TQ4TSN2P91&api_secret=<redacted>`,    {      method: 'POST',      body: JSON.stringify({ client_id: clientId, events: [event] })    }  );}trackPageView(); // called on every popup open