IMO, the big takeaway here is that protecting yourself from phishing is not just about making sure the email is from who it says it is but also making sure it's

IMO, the big takeaway here is that protecting yourself from phishing is not just about making sure the email is from who it says it is but also making sure it's actually serving the purpose you believe it is. While I, like many in the comments, agree that Netflix needs to validate the email account, my hunch is this trick would still be quite effective with that.