Even then, it’s probably predicated on the idea that a reasonable person would realize that it was sent in error and that even though they’ve received the email they’re not authorized to access the systems that the link points to.

It’s still ridiculous the penalties, globally, for ‘hacking’ wya out of proportion.