My company sends out the phishing tests, but never provides any user feedback about them, so they’re worse than useless. If you click the links then oh well. If you report them then oh well. They’re pointless.