That question came up to me, when recently working on one project I needed to restart my PC several times. And therefore, while I used 3-5 web apps I needed to log back in to each one of them again, after each restart. And I started wondering if privacy-wise that auto-clear feature is worth it or not? Has anyone maybe tested that?


It’s not really wise to self dox, IMO. That would be like, “here’s how to hack me!” ;)
but a lot of them have to do with outdated versions of zlib. Try it on a derivation and find out.
Here’s someone else on the NixOS discourse with a similar experience: https://discourse.nixos.org/t/checking-and-dealing-with-cves