>But this is harder I don't think it's unreasonable to expect the attacker to be able to build a little bit of browser automation. >not always viable in all s

>But this is harder I don't think it's unreasonable to expect the attacker to be able to build a little bit of browser automation. >not always viable in all situations. Like what?