To clarify, sensitive information is no longer transferred at all. This was hotfixed earlier today.