Popout and embed are separate, and the problem with clickjacking is that it’s mostly invisible to the victim. They might think it’s a fun new browser game they’re playing when in reality they’re spamming malicious links in chat, for example.
2 Likes