Generally the attack vector is much easier: Just replace the image with a "This service is currently being upgraded for your safety!" or whatever. Most people

Generally the attack vector is much easier: Just replace the image with a "This service is currently being upgraded for your safety!" or whatever. Most people in studies I've seen will still go through with the login.