Does this let you neuter phishing? I'm not certain of all the moving parts but it's not obvious to me that it defeats proxy attacks of a sort now available out of the box to bad guys and effective against things like TOTP.