This is a very good point. It reminds me of when the US FBI was "hacked". Where hacking meant that you could send emails from the client-side.

https://www.theverge.com/2021/11/14/22781341/fbi-email-syste...