Perhaps, but it doesn't mean users are incapable at identifying phishing pages. With an address bar both the user AND Chrome can help identify phishing attacks.
"Though Zipcar didn’t really incorporate reducing carbon emissions into its core idea, Chase says it’s a by-product that can’t be taken away."
I think it is crucial that startups realize that they cannot predict all the vectors their product will impact. However, that being said it is important that they recognize the markets that they have impacted and capitalize on it. Congrats Chase (and Zipcar)!
(full disclosure: haven't pitched to investors/YC)
Just talking about your product with colleagues, mentors, friends, etc. can help you get prepared. Most likely they will ask you questions and it can be like a mock "interview".