clickjacking (top-layer)
demonstrates how a top-layer popover combined with `pointer-events: none` can act as a visual lure that misdirects user clicks onto a different element underneath
Security
Patterns where the host page induces unsafe or risky interactions