A one-click hack can still be a hack. Clicking a link should not be able to break out of a sandbox, run arbitrary code, etc and should still be considered a hack.
I think both should be considered hacks, but zero click is much scarier, so it makes sense to distinguish them
I think both should be considered hacks, but zero click is much scarier, so it makes sense to distinguish them