@jonty Was also just reminded about the time my dad was trying to log in to a website on his phone, which for some unaccountable reason required *two* 2FA emails to complete whatever thing he was doing. He was on the website in the browser, clicked the link to send him the email, and then opened the email, which contained a link to the website. He clicked that, which took him to the website *in the email app's in-app browser*, logged him in, and he clicked the link there to send another email. But when he came out of that to find the second email, you can't do that without closing and ending that instance of the browser session, so when he clicked the link in the second email it just said 'error: you are not logged in', so he tried to log in again, and it sent him another copy of the first email. If the email app had sent him to a real browser, or if they didn't require two emails (WHY?) it'd have been fine, but he'd been round this loop five times before he asked me, and it took me another go round to see what was happening, and had to explain to my dad (40+ years working with computers) that there's two different browsers and you can only tell them apart by swiping down and looking at the top bar, which is subtly different, and clicking 'open in browser' fixed it. Absolute bin fire.