Clickjacing can lead to account takeover

hello team . while testing the site we found an endpoint call https://sketch.pixiv.net/draw using it we can trick the user to fake login with the use of clickjackingpoc : https://github.com/shifa123/clickjackingpoc as poc shown :

Impact