The Dutch ministry of justice paid for a #privacy test of Office 365, finding a series of issues. Just one of these: 6 different companies receive user data including file names, without even a privacy policy.
https://www.privacycompany.eu/blogpost-nl/onderzoek-naar-microsoft-office-365-for-the-web-en-apps-microsoft-belooft-nieuwe-maatregelen-om-hoge-privacyrisicos-te-verlagen
@Shamar @nextcloud I am missing a crowdsourced knowledge base in uMatrix that can tell me if, for example, the webflow domain is simply a CDN, a tracker, ads, or what have you. Could probably be reusing a lot of intel from existing block lists.