I get the concern at a high level, but it seems weird to not have any specific examples or a PoC. Couldn't you already send someone an email or direct them to

I get the concern at a high level, but it seems weird to not have any specific examples or a PoC. Couldn't you already send someone an email or direct them to a webpage where the text "financialstatement.zip" is linked... anywhere?