These two statements of yours seem at odds with each other:

"The privacy and security protections are about preventing other information (like ip, browser headers, cookies) from leaking, rather than read notifications."

"If you care about maintaining your privacy, I would recommend disabling the new functionality."