If you can't authenticate the platform, you can't defend the user, end of story. The web "works" insofar as it does because of the margins of abuse are tolerab

If you can't authenticate the platform, you can't defend the user, end of story. The web "works" insofar as it does because of the margins of abuse are tolerable. I'm sure those working in "ad tech" have different ideas of how tolerable the abuse is. I've always wondered about how banks deal with it, but having read through my bank's online ToS, I'm happy with my level of liability, because they're clearly willing to take on more risk than I would given the situation.