They made a decision that felt like small restitution. They uninstalled the cracked build, scrubbed the system, and reported the malicious domain to their institution’s IT team. For immediate needs, they leaned on open-access resources and the institution’s library; where access gaps remained, they consulted colleagues and direct journal sources. It was less seamless, more work-intensive, but it reinstated a principle: clinical tools that shape decisions demand integrity in both content and acquisition.