I mean, they're not wrong are they? Would this attack have been any less effective if instead of `data:text/html,https://accounts.google.com/...` https://accoun

I mean, they're not wrong are they? Would this attack have been any less effective if instead of `data:text/html,https://accounts.google.com/...` https://accounts.google.com/...` the URL bar said `https://accounts.google.com.login.cz/...` https://accounts.google.com.login.cz/...` instead?