This is why we need red teaming

Simply put, people are, well, people. Social engineering works.