[taco_emoji]

Yeah it seems clear to me that he's recommending it to be one portion of a risk assessment for a given email address.