That’s a heuristic which like all heuristics will fail to work in some cases.

This is one of them - we’ve never had private hostile organizations with immense budgets trying to manipulate and help themselves to the private information of regular people at global scale before.