Fair, though I think it's still true that it's a very difficult threat model. Also worth noting that email clients typically tell you about new logins/clients

Fair, though I think it's still true that it's a very difficult threat model. Also worth noting that email clients typically tell you about new logins/clients (though I don't think their way of doing it is particularly robust).