I take the point but I also take it with a degree of realism. I've been at companies where they did this and I usually 'fail the test'. I received the email,

I take the point but I also take it with a degree of realism. I've been at companies where they did this and I usually 'fail the test'. I received the email, but given the highly targeted nature (wasn't very generic) I get curious. When you can tell it san internal test its fun to see if you can trace it back to a particular person or department. So I created a VM in a secondary clean laptop and opened it. So based on the test I failed because they detected I followed a link. I don't for one second believe that 1 in 5 Gitlab employees also did this, but I'm certainly distrustful of test numbers like this.