I get the rationale for using a separate domain for user-generated content, I sort-of get the rationale for an internal corp domain, but seeing material facts d

I get the rationale for using a separate domain for user-generated content, I sort-of get the rationale for an internal corp domain, but seeing material facts disclosed on paypal-corp.com reminds me how limited URL bars are for teaching people not to fall for phishing.