What I don't understand is that many websites frame-bust to prevent phishing and click-jacking attacks on their content. But if Google wants to be accessible through portals, they'll have to open themselves up to the same phishing and click-jacking vulnerabilities, right?