Comment by saintfire

> A good rule of thumb is knowing that no legitimate business will request your username and password after clicking their email’s unsubscription button.

Just FAANG and fintech. Pretty lousy rule of thumb.