I would hope that high value target sites such as banks would implement CSPs to prevent that or make it more difficult though.