It seems it was one of those cases where the "InfoSec" Department kept doing all these trainings how we don't do that and why but some manager or head decided to sent that email and surely cant face repercussions due to influence.

In the end it fucks me because when I tell my dad "Oh they never ask for you password, so don't say it to nobody no matter what."

He "But when they asked us last year?!"