[neon_erosion]

This is the kind of thing that customers rely on you to do _before_ it causes an incident.

[ericselin]

The thing is, for users, having a separate domain wouldn't have made any difference without the PSL. And you cannot get on there before you're big enough - which I'd say is roughly at the same time as you start grabbing the attention of scammers.