yes of course - but in this case the "unexpected" prompt is presented to the attacker, not the user.