Apple is not at fault here though.
These people have clicked on a phishing email no different to a banking or retail one.