I think it’s more likely that they don’t care what happens with your data. They simply install that JS payload and check the revenue at the end of the month.