Unbeknownst to them, the clipboard contents have been replaced with an address controlled by some bad actor.
Now imagine instead that the wallet has some address book with a pubkey for each recipient the user wants to send bitcoin to.