The amount of complaining about that here is crazy, takes all my effort not to comment on it.
Maybe they should have, you know, not clicked on links in email, like they are supposed to have been trained. Especially after the massive breach we had a few years ago.
Phishing emails are often things that are going to sound good, that's how they get people.