I meant it more as a rhetorical question: even if you really don't click on any link to any of your important accounts _ever_, you are still vulnerable: - if y

I meant it more as a rhetorical question: even if you really don't click on any link to any of your important accounts _ever_, you are still vulnerable: - if you install a malicious browser add-on (or if the guy behind one you already have gets phished and pushes a malicious update). - if any other part of your system/browser ever gets compromised. - If you mistype the address and your browser searches on Google/bing instead you can be phished from the ad links at the top.