As hackers use AI-generated documents to make phishing scams more convincing, should tech companies be held responsible for stopping this abuse, or is staying alert ultimately up to each individual?