I've used that for legitimate use too, and yes, it can be convenient. I think it can stay convenient without some of the issues that made this particular phishi

I've used that for legitimate use too, and yes, it can be convenient. I think it can stay convenient without some of the issues that made this particular phishing mail so well made (i.e. tell the recipient that the message they're reading is part of an invoice text sent by the invoice sender + use a dedicated email address for invoices).