Many illicit sites now require user registration. Providing an email and password to an illegal streaming operator creates a vulnerability:
