Think of it this way: If they don't learn that phishing is a threat while they're on a small gaming website, they're going to end up learning it when they lose their SSN to a fake bank later on.