I imagine there would be a prompt of “are you trying to log into <website>?“ and the user would have to confirm