I agree. We have a security score at work and mine had been zero for a long time. I realized that you need to report the emails as spam or phishing and not just ignore/delete like I usually do.