They frequently use methods where you have to double-click on an email attachment. Most people consider cut-and-paste from a web site to be safer than that.<p>Also, non-TLS web sites can potentially be hijacked in flight, so this could happen even if the site in question wasn&#x27;t directly cooperating.