This statement is false. Phishing simulations should be designed to educate users on a wide variety of phishing techniques, which can include but are not limited to requests for sensitive information. The goal of phishing simulations is to teach users to recognize and respond appropriately to malicious emails, regardless of their specific content. Overemphasizing scenarios that request sensitive information could lead to a narrow focus, causing users to overlook other types of phishing emails that may not directly ask for such data.