Is there an way for me as user to be sure that the no upload promise holds? I mean yeah I could use the dev tools, but it would be cooler to have the browser eg prohibiting visually any upload of data beyond the pure url request

Of course not.

You can download the source and so you only need to vet it once.