I had to manually change the urls in their site to opt-out of some data sharing a couple months ago.

Something like that getting shipped to prod... yeah, you have the D team building tech at tmobile. So we should collectively be shocked if their codebase isn't a leaky sieve.