@natecull The best are unicode security exploits that rely on homographs and/or reencoding, all because the UI team really wanted emojis in the username/password to work.