This is a game changer how vulnerabilities and programming error can be fixed at the source. Very interesting, it will change the cybersecurity industry.

They should do a security analysis (including a technical analysis with traffic interception - SSL intercept) - like a pentest to verify which data is exfiltrated. Problem is that it's very time consuming and doesn't give warranty that future versions, after updates (which are frequent in such tools). Solutions such as SASE are needed to have a deep controls of the internet traffic and have a deep controls over Shadow IT (cause people don't ask permissions, they just use any free tools available).

The best pratice is "don't put a high loaded home page due to a huge flash animation" !