Recently the Village Pump (technical) section has raised an issue that links books.google.com is changed to gg.sxbb.me (See here for the discussion). The editor who performed the edits claimed that the edits are changed due to VisualEditor, but is in fact changed by the mirror/fork website.
One sysop has raised a concern, as such an incident is potentially dangerous as the mirror site can gain the user credential, which can be used to perform harmful edits that are not done by the users themselves, breaking the intention of HSTS.
This also decreases the trust of some first-time users about Wikimedia as they think the edits are changed by Wikimedia's tools/extensions, which appears in this case.
We are glad that. this time, the edits from the mirror site are not intentionally harmful, but maybe not next time. I hope the security team can evaluate such a situation.