I'm pretty sure I fell for a phishing scam a couple decades ago — my eBay password was compromised (fortunately there were no significant consequences). Once upon a time I also got tricked by the phone company into ordering stuff I didn't intend to. And while I don't think I've fallen for anything recently and am pretty security focused, it still takes mental energy to avoid all the traps.

I assume that the "people who fall for this stuff" are "people like me". Even the best among us are only statistically less likely to get snookered, not immune.