You are right and what some people miss is that social engineering being the vector to gain foothold doesn’t mean that it was sufficient to allow the breach. Almost always you need some other weakness (or a series of them). Except when the weaknesses are so had that you don’t need a foothold at all (like this case), or when the social engineering gives you everything (rare, but you might convince you someone to give you access to data etc.).

A whole separate conversation is deserved by how effective (or not) social engineering training is. Quite a few good papers about the topic came out in the last fee years.

BUT! Do a thorough quality and content check (i.e. no rape, kiddy diddling, spousal abuse, any other type of abuse, etc.)

Genuine question, why? It seems just that you want your arbitrary moral rules instead of Visa’s or MasterCard’s (or PayPal’s).

This also takes away agency from people. In fact, I am sure that there would be a way to diagnose every single relationship ever as a form of abuse in which someone takes advantage of someone else’s something.

Adults are responsible for their choices, and particularly in the case of “assholes”, that is often associated with being assertive, dismissive and some people just like that kind of “I am the main character” features. Maybe there are even some deep rooted evolutionary reasons for that, I don’t know. Anyway, painting anything as victim-oppressor dichotomy IMHO is nonsense.

https://www.wiley.com/en-us/Platform+Capitalism-p-9781509504862

You might be interested in this book