"so you could be using it when shopping online without even knowing it"
It could even be worse. I know at least a site (a known photography bags maker) where you can't even see the products if you don't allow Shopify. A lot of sites today are an intricate mesh of different services, including "malware as a service".
Biting the hand that feeds IT
