We hear the same messages from large tech companies and security specialists all the time. Don't click on links from unknown and untrusted sources, and don't fall for over-the-phone scams. Many banks and other companies never send links in email in order to "train" us in being cyber smart.
But every now and then, companies do dumb things that leave us scratching our heads. Like what Microsoft did with a friend of mine earlier this week.