I mean, no shit. Turns out people get stupid when they're forced to work hundreds of hours of overtime and get no time off. The same thing would happen if you didn't feed them for two weeks and then sent a phishing email promising pizza. The only thing this demonstrates is that the best cybersecurity measure they could take is giving their employees enough time off.