considering how much sensitive shit people do on slack, it's surprising the amount of 3p js that is loaded on slack.com's main page. (it's much less on the <subdomain>.slack.com actual app sites.)