If the user is on a search page, the user's query (which could be argued as private/sensitive data) would be exposed. That's one I can think of.