Orgs that run a phishing simualation the first week their staff get back from holiday deserve every ounce of distrust they earn from pulling such a move

Hint: this will absolutely ensure no one wants to report to you for the rest of the year