But this assertion you keep making is beyond naive. Either you just want to downplay the importance of Russia's covert election interference, or you don't get it.

In my role I have been running operational due diligence reviews by clients for about 2 decades. I have seen cybersecurity go from a topic nobody emphasized (Y2K aside in the late 90s) to becoming the most sensitive area. And while phishing training is an essential part of a cybersecurity program, it is a relatively small part of the overall solution. That requires redundant measures to ensure that when human error occurs - and it will, humans being only human - servers and critical applications need to have safeguards so that they are protected. Every single session on phishing goes the same - discussions about qtly phishing tests, where the number of employees failing the test hopefully declines over time, but it never goes to 0 (in any company they examine, which is many). Even the ODD pros for our clients at times talk about how they fell into the trap in their own company's tests, and this is their area of expertise.

Training is a part of a best-practices program, but it isn't even 25% of the whole solution. And of course one would expect national security conscious repubs to want to hold all foreign powers accountable for any efforts to attack elections, and our Intel community thinks they go way beyond the spear-phishing alleged in the indictments.