So a bad person can steal favicon of say New York Times and trick users clicking their fake links because eventually users will get used to establishing "credib

So a bad person can steal favicon of say New York Times and trick users clicking their fake links because eventually users will get used to establishing "credibility" of brand by recognizing the favicons? (granted the bad person is great at SEO best practices and their search results show up at the top)