There is an actual answer to this: Click every phishing email you get. If "Microsoft support" calls your work number and wants access to your work PC, let them do it. Here is why: When insurance companies get flattened by ransomware, they approve every claim while they recover.
So, pretend for a moment that I work at an insurance company and have had a moral epiphany about how evil my employer is. What am I supposed to do? Look for another job? Okay, say I do that, but I can't find anyone to hire me. I need to keep food on the table. What should I do?