Ask HN: Is an overlay more susceptible to phishing?