Does it really make anyone safer? I’d think that time would be better spent deploying WebAuthn so phishing is impossible, and working vendors to reduce the number of legitimate messages which are indistinguishable from phishing.
1) produce shitty AI voiceover "please don't click email links" videos
2) randomly email, text, etc us with fake stuff trying to get you to click the links.
I always report the emails as phishing to Google just hoping one day something gets flagged somewhere on Google's side, but I doubt it will ever happen.
My company is, but that's me being pedantic.
What I meant "we had to be enrolled in a service" in the "any company that provides this service" and was just giving the current company as an example.
Most companies don't use these tools correctly, and certainly the technical audience here on HN will despise them. But phishing simulations can reduce your risk.