[quickthrower2]

User education is not dumb. Services that send test phishing emails and check that people mark them as such are a good idea. It gets people used to receiving suspect emails and dealing with them.

[adql]

Especially considering most big breaches appear to be "some human somewhere fucked up"