Don't trust my "client-side only" claim. Open DevTools and check.

Carhartt just had 12.9 million customer accounts show up on Have I Been Pwned. Names, emails, phone...