This is entirely correct. But the example I’m thinking of though is the low hanging fruit, didn’t do anything to protect against fraud and has very probably been the victim of scams previously.

“Here’s my big pile of Christmas cards Mr. Postman” straight from the front door and one or two of those just happen to not make it. Or the person doing the pickup from a drop box or whatever they’re called.

It’s the sort of spontaneous, in the moment, thing that could come up a fair number of times and that I can imagine someone getting away with as long as they don’t push it too many times per season. And the sort of thing I would hope the people in charge of not letting that happen have a plan against.