“You don’t need to know how to read email headers to detect phishing. You just need to trust your coercion detector, and know that nothing that happens online invalidates it.