There's no reason to think it isn't true. It matches every pattern of behavior observed from every tech company.
And maybe have access to EVERY site actually, with “forgot password” type stuff in addition to providing oauth tokens…
Boy do I have news for you.
https://arstechnica.com/information-technology/2023/05/micro...