[pwg]

> A convincing phishing attack might trick you into manually entering a code into a fake page.

Sadly, for a far too large population of users, a convincing phishing attack will be successful, even if the tech. is flashing ten different warnings of "this is a phishing attack page" at the same time. You can't "technology" around human nature for a subset of the population.