And what happens when one of those domains gets hacked and a malicious script injected into their code that takes advantage of a 0-day in the browser to siphon

And what happens when one of those domains gets hacked and a malicious script injected into their code that takes advantage of a 0-day in the browser to siphon the cash? Not at all a far-fetched situation as it’s how ransomware works today.