No, I'm not sure. But if I weren't using TLS I would be sure that they definitely could! This is exactly the type of argument the post you replied to was talk

No, I'm not sure. But if I weren't using TLS I would be sure that they definitely could! This is exactly the type of argument the post you replied to was talking about. If one option might be vulnerable, and the other is definitely vulnerable, then obviously pick the one that isn't definitely vulnerable.