Humans are still better at creating phishing emails than AI — for now