But then you have to be able to trust that the other domain is actually operated by Discord and isn't some social engineering front.