My belief that this is a scam was justified when this email arrived. (I'll call them SL and ZN.)
ZN wants to use 'securinglaravel', and SL has advised against it, but ZN is just going to ignore SL's advice! 🙃
Clearly my next course of action was to rat out ZN to SL... 😇
Given my intention is to string them along, it might have been a mistake to mention the trademark and put too much pressure on them too early? We shall see how they respond. 🤔