The attacks are more sophisticated and with Ai able to be performed at far larger scales. Cybersecurity practices have been eroded for years by, I suspect, intentional effort by multiple spook groups to make security more complex and less accessible to normal people. Multiple fascists governments globally have also made strong efforts to weaken education, sow mistrust of experts, and in general promote anti-intellectualism.
The result is a population of over confident, uneducated people who believe they can detect scams and lies with their vast superiority, and who widely lack tools, training, and access to real cybersecurity.
They probably think NordVPN protects them from phishing too, somehow.