Wouldn’t a hacker want to do exactly this to take over an account- if it was possible?