If you don't know what you're doing and as a result bad things happen, that's on you.

I don't have a lot of sympathy for people who allow phishing sites suffering reputational consequences.