The worst email mistake usually crystallizes in a single click, often on a link that looks like a login page or a document share. That one action can hand over credentials, install a remote access ...