yes. very much this! it's harder to spot a fake domain when subdomains and browser shenanigans are involved when writing an email for example than when a game called "spot the fake" is played.