So any site can grab the home page of any other site I am logged into, unless that site tries to prevent it (same origin policy or something like that?)? Yikes...