Would you rather send a mass email to all clients with a typo spelling the company name incorrectly OR accidentally click on a phishing email?