I have liked the phishing example via the Microsoft domain:
https://forms.office.com.Pages/ResponsePage.aspx?.....
and "let's negotiate" ransom trojan.
The below citation could be interesting for many MT readers:
"So, to fight the criminal attackers you do not have to have perfect security. You just have to have a little bit better security."
The test of the bulletproof jacket was awesome.

It is a good example of a false sense of security. I can imagine the user who installs two AVs, which can give 0.001% additional security for EXE files, and does not significantly improve already low protection against the most common dangers via scripts.
