Seconding the thread of folks being like, "I gotta do the training anyway so fuck it," BUT I did think it was very funny that frequently after sending out a phishing test or whatever, this would be followed up with an email requesting the security training, and invariably a bunch of people would report THAT.