1. Even if they roll it out to all their login pages fresh computers are still a problem (it is addressed in the article), but the current state of affairs is t

1. Even if they roll it out to all their login pages fresh computers are still a problem (it is addressed in the article), but the current state of affairs is that "users can't tell the difference between a hacked site and a legitimate site". When this system fails it is just as bad as the current system, when it is setup it is significantly safer. > You can never remove the customization. 2. Google can just announce they are moving away from the customized login page on their login page. The customized login page is trusted so the new information is trusted. The customization can be framed as an extra security measure that power users who want to protect themselves from phishing attacks can setup on their home computer. Similar to the way google rolled out two-factor authentication. >They'd rather have you authenticate to your browser or via a device anyways, long term. Long term this is right login screens will move off of the browser, but security must be concerned about the now. Note that phishing still presents a risk on mobile device login screens. As long as your security depends on something you know, phishing attacks will be relevant, and client-side identification of trust will still be relevant.