When my organization does these, the link just goes to a static page that says "you could have been phished". The fact that in fact no serious attempt at phishi

When my organization does these, the link just goes to a static page that says "you could have been phished". The fact that in fact no serious attempt at phishing has yet taken place and that my work machine is far too insecure if they're worried about browser 0-days seems totally lost on them.