At least users can double check the address. But I'm not clear on exactly what clicking the "monitor" button does. If malware is present, could it also interfere with that process?