Came here to say that. If your system relies on an external system like someone's email, and that gets breached, your system has been breached. You don't get to

Came here to say that. If your system relies on an external system like someone's email, and that gets breached, your system has been breached. You don't get to brag that the successful attack was indirect; most of them are.