My company sends phishing emails every few weeks, for like past 5 years U click it or open attachment, u are automatically enrolled in trainingg u must complet

My company sends phishing emails every few weeks, for like past 5 years U click it or open attachment, u are automatically enrolled in trainingg u must complete. Very few people click anything remotely obscure, and are asking manager if the email is from a legitimate company we are dealing with. Ex: I got a signup confirmation email from a legitimate website, asked our director about it. He looked into it and confirmed with IT we had been signed up and infosec was fine with it. We then relayed to the whole team that it is legitimate email. I would say highly successful