This list of sites could be tested covertly, then sent back to the server without your knowledge. As a proof of concept it won't be, but it could.