The fact sites do evil things with these headers is why I configure Firefox with
network.http.referer.XOriginTrimmingPolicy
set to 2. It "breaks" sites, but often in good ways (such as the site in TFA).