Yes. So when it prevents the phishing attempt there's a good chance that quite a few people will assume something broke and attempt an alternative login method

Yes. So when it prevents the phishing attempt there's a good chance that quite a few people will assume something broke and attempt an alternative login method - with the phishing "service".