Do you guys worry about email security as much as other cyber threats?

I was talking to our IT guy the other day and he was saying email is one of the easiest ways hackers get into organizations. Like, I know phishing is a thing, but honestly it's kinda wild thinking about how many security layers we put on networks and devices, but email still seems like a weak spot.