Phishing attacks succeed against even those who should know better. Which all begs the question, "Why bother with security training?"