size_t TopSitesCache::GetNumNonForcedURLs() const {
  return top_sites_.size() - num_forced_urls_;
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.