I read it as, “you should never be in the mindset of ‘expecting’ a phish from any [specific] source.”

I think OP agrees with you.