[BeefWellington]

There are people in all manner of jobs that are just working a job and don't have a significant interest in learning all they can about their area of employment. IME security has a lot of people who see it as a hot new thing but don't actually invest their time and attention into maintaining an appropriate level of awareness.

[shkkmo]

Phone calls are one of the primary means of communication. If you aren't aware of how it can be compromised, you are not capable of adequately assessing security.

It is not like the spoofibility of phone numbers is some security industry specific news. It gets talked about all the time outside of tech given the prevalence of spam calls.