Comment by hsbauauvhabzb

What’s to stop someone rewriting the iframe wrapper to hide the real iframe and display a fake one?