I get that this attack vector as described is mitigated by reviewing the entire address but most of us don’t do that most of the time. Just trying to see if this is worth worrying about or if it’s old news.