So do you think the risk of this happening (which this change now prevents) is greater than the risk posed by HTTP user agent strings being stored by most standard webserver access logs?
I would agree it probably is, for the record, but I didn’t find conversations where that discussion was actually resolved, and I can see why people who browse in Safest mode could be concerned.