I work for a managed service provider, and security for our clients is one of our most important goals.

Our CEO accidentally got phished then sent out emails to all our clients. We rolled with it by explaining kinda what you just said.