OK, everyone is buzzing about CVE-2026-96951, a MoTW bypass. Are these really as significant as people suggest? Like I get that it makes phishing easier but it's still basically phishing. I'm not convinced a working MoTW stops users clicking through prompts in the first place.