WTF.
https://themarkup.org/pixel-hunt/2022/11/22/tax-filing-websites-have-been-sending-users-financial-information-to-facebook
Shut them all down.
The Markup found services including TaxAct, TaxSlayer, and H&R Block sending sensitive data