Is email masking for enterprises necessary?

I'm curious what you folks think. Sure, a lot of training is given so that employees don't click on phishing links and re-use passwords, but from my experience a lot of that training is forgotten or ignored. People share they work email addresses when they sign up for services and newsletters (which get breached later on) and these work email addresses often tell you the full name of an employee + where they work - a simple google search with …

addresses breached click cybersecurity don email employees enterprises experience links lot masking newsletters passwords people phishing phishing links services share sign training work