Never said browser exploits are easy to make. I just pointed out that many times phishing is about just clicking on the link, not getting people to actually typ

Never said browser exploits are easy to make. I just pointed out that many times phishing is about just clicking on the link, not getting people to actually type in their passwords.