It hasn't trained people not to fall for a phishing email. It's trained them not to believe their company when they offer a bonus. Which might stop the same e

It hasn't trained people not to fall for a phishing email. It's trained them not to believe their company when they offer a bonus. Which might stop the same email from working tomorrow, but not the one saying "This needs to be filled out by Friday!" or "Class action settlement against GoDaddy over fake bonuses"