"monkeys mindlessly following a script" -- social engineering is a script that is ridiculously successful at achieving its goals. Humans are always the weakest

"monkeys mindlessly following a script" -- social engineering is a script that is ridiculously successful at achieving its goals. Humans are always the weakest link. What's ironic is that if it hadn't been for all the FUD in the 90s against PGP, maybe PGP signing of messages to verify identity would have become the norm for email and it would be much more difficult to spoof. I wonder if anyone has ever thought of an option in gmail/googleplus for supporting PGP?