Re: the phishing example, it's roughly analogous to a business refusing to put up caution signs around dangerous areas like slippery floors or where there's construction. It's such a small thing that could help prevent enormous losses from clients and yet they won't do it for shady business reasons.