Reminds me of https://xkcd.com/1200/
But it's not getting access to real user data, just a partial list of things that are installed.