In practice there's often a way to escalate privilege. Defense in depth requires that one be good at each layer. Being good against phishing attacks is import

In practice there's often a way to escalate privilege. Defense in depth requires that one be good at each layer. Being good against phishing attacks is important even when the victim has apparently-inconsequential access.