[thanksforfish]

> One advanced strategy is to deliver real but defanged phishing emails to more employees than originally received it.

This isn't recommending against phishing simulations, but instead suggests better crafted emails and gentler response when employees are tricked.