Maybe the future of anti-phishing training will be random confirmations in the middle of agentic coding session