Here’s a scenario that plays out constantly: someone clicks a bad link, malware runs, and because they were logged in as ...