Keep in mind though, that once your Layer 2 is hijacked, a lot of attacks are possible before upper layer security kicks in - things like browser redirection and exploitation are very common these days