I think a good bit would be to save all the simulated phishing attacks your company’s IT department sends you for months, like 50 of them, and then click the links in them all at once