What attack vector does it protect against that pasting the string into an online base64 decoder web app doesn't also protect against?