Ignore their spammy emails? Per their VP, they are totally going to up their game and inject their "notifications" in your everyday Web traffic. https://twitter.com/jlivingood/status/939848009386549248
Anything else fails to meet the criteria of "critical".
If I buy a crappy 802.11b wifi dongle, are you going to inject JS too?