Not sure how much of an attack that is. FWIW the preloading is nice as a user.

Is the request coming from the user's IP or via a Twitter proxy?

As a plain webview would mean that you can grab everyone's details.