There’s a lot of them about, sadly. You could have the best security in the world, but if idiots are bypassing it (like Sean’s example), it’s worthless. People are always the weakest link. They’re lazy. They’re complacent. They don’t think anything bad will happen to them. Hackers and scammers know this and companies like them are a godsend. I’d tell them. They probably don’t see anything wrong with what they’re doing.