LastPass works just fine on my Android phone. :) Phishing is an everpresent problem, and does require vigilance from both browser vendors and users, but I real

LastPass works just fine on my Android phone. :) Phishing is an everpresent problem, and does require vigilance from both browser vendors and users, but I really don't think that this contributes to the problem in any significant way, simply because there are completely legitimate browser features that can be used to exactly the same effect, and for which the differences between "benign" and "hostile" use is entirely subjective and undetectable by software. Fixing this would have exactly no impact on the bad guys' ability to conduct a blind redirection.