And zero click (but download a malicious file, point your config to it in a roundabout way, and trigger the configured shortcut) was also a honest mistake?