I claim that is not true, because very soon AI agents (probably built into Chrome) will detect and warn. In which case you need to phish the agent, tricking the human won't be enough.

If the human is much easier to phish than the agent (which I believe is true in most cases) then this would be a win