Couldn't this also be harmful _using_ something like github pages? Someone could create a page that would look almost right for, as an example, https://username.github.io/google/google-authenticator-andro...