And yet, a multitude of banks, credit card companies, stores, etc. routinely send promotional emails where the only way to do what they want you to do is either click on the link (5 seconds) or try to log in through their home page and then find the same option among approximately 9000 menu items, banners and popups.

Are those things important? Well, never life-or-death important, for sure. Is getting 20% off your next order worth the risk of getting your account stolen? Probably not, but I suspect the majority of the population would still act as if it were.