Earlier quoted context omitted.
Yes, but for every person I tell that they had a data breach causing them to phish their customers through calendar, I can poison 50 people in each organization, then they can poison 50 and so forth... let's call it exponential growth of the DELL-20 coronavirus.
And each of those 10 successes tells 50, Don’t you get it?! They wouldn’t do it if it didn’t work, and you are vastly outnumbered. It’s not right, it’s bloody annoying, but it’s there and it’s not going away. Google needs to fix the root problem, so that the spammy behaviour is not possible.
It is quite possible that the successes are more visible than the failures and thus it seems like it works. Or it "works" for the sales rep because he gets more leads and thus a bigger bonus, while hurting the company - but the company hasn't figured that out yet. Or it works in the short term but isn't worth the reputation damage in the long term.
Of course it's also possible that it just works, just pointing out that reality shows that people and companies often do things that are just stupid.