Exactly. But for the savy it's easier to see from network tab in dev tools where your data is sent.
No such luck with native apps. I don't almost never use wireshark to figure out what my native apps are doing.
Also. The entire argument falls apart when you factor in the ability to proxy data. E.g google.com -> bit-shady-site.com -> for-sure-shady-site.com