I remember at some point Google disallowed more phishing attacks from red teams. Nothing new was being learned. They always work.