If you've done any of these in the last week —
Googled "decode jwt online", clicked the first result, and pasted a real token into a textbox on a domain you'd never heard of.
Opened an ad-cluttered "JSON formatter" site to clean up a 2-KB payload.
Pasted a row of customer data into a "CSV to JSON" converter to massage it for a support ticket.
…you already know the problem. The web is covered in single-purpose developer utility sites, and most of them are some combination of slow, ad-infested, and quietly logging whatever you paste into them.
