Imo the bigger threat/risk is the honeypot of bitcoiners tied to their Google IDs. They should at LEAST be using nostr for accounts.