I thought that too, until I was targeted and fell for a ID theft scam myself a few years ago. It's not just old folks, and techniques change and adapt with the technology. There were aspects of their attack that I did not have the knowledge to recognize, and they caught me when I was working and distracted, so I was even less apt to catch the red flags (which I admit were blindingly obvious in hindsight).
Having said that, the cyber awareness challenge is stupid- it's the same stuff, year after year, and falling further behind. Even calling it the "cyber awareness challenge" makes it sound like we're in the 1990s when people were just becoming aware that the internet is a thing.