This page is an ordinary third-party site. It has no SimpleLogin account, no session cookie and no API key. The only ingredient is the email field below, which is what makes the extension inject its button here.
Gated on purpose: the exploit only runs with ?run=TOKEN, so a casual visitor who has
the extension installed is never acted upon.