Most of the attacks could be avoided if the employee didn't click that PDF that came from a weird address or if they didn't click that link to check what's the

Most of the attacks could be avoided if the employee didn't click that PDF that came from a weird address or if they didn't click that link to check what's the problem with that shipment they are not expecting.