At least that vector brings the scam in to the human understandable space. While silently installed malware stealing your session tokens in the background is completely transparent and beyond the comprehension of most people. "Call bank security and transfer your money to us" is at least detectable by the common person.