Home Assistant

The check lives in the Supervisor, hashes values locally and sends only a 5-character SHA-1 prefix to HIBP. It has existed for years; a recent release merely made its warning visible, which is how a user noticed it.

The maintainer's apology didn't end the argument. Readers objected to the premise: a home automation hub that phones out, even with a prefix, is not what they installed it for.

VW didn't just drop GrapheneOS support — it shut its API to anything not certified by Google Play, killing the community integrations people used to schedule charging and preheating.

The detail that stung most in the thread came from a reader pointing out that none of this needs to touch a server: your own charging data should be readable locally from the car. Several would-be buyers said they cancelled orders over it — one mid-purchase.