I recall somewhere that it makes some kind of difference in scripts

– noconfirm

I believe there has been a case of this. I remember a person phished some service to give them access to a person’s account or account data under the guise of “lives are on the line here”. Might’ve also spoofed the email, but either way, he managed to get it

Edit: something like this

https://gizmodo.com/hackers-are-using-police-emails-to-send-tech-companies-fraudulent-data-requests-2000522134