I read the first lines and thought immediately of all those e-mails marked IMPORTANT coming from &quot;my bank&quot; that request I immediately enter my username and password somewhere for &quot;security&quot;.<p>Teaching blind compliance with any (unauthenticated) request based on &quot;security&quot; is the one way we could make the situation even worse.