Compared to the alternatives, the sendBeacon() does apply two restrictions: there is no callback method, and the payload size can be restricted by the user agent. Otherwise, the sendBeacon() API is not subject to any additional restrictions.
This part reads poorly:
... the sendBeacon() does apply ...
I'd expect the following: (like the later sentence in the section)
Grammar typo in Privacy and Security section: https://w3c.github.io/beacon/#privacy-and-security
Spec text:
This part reads poorly:
I'd expect the following: (like the later sentence in the section)