I believe there were some rumors that it was happenning, but not too public.

I think I remember seeing a blogpost about Honey extension being a very bad idea from security perspective way before the public outcry and it might had mentioned the attribution(right term?) too.