Not at all surprised.

At my old company, we had a theory that most of our spearphishing was coming from LI. So we tested it.

I had permission to create a completely fake person, fake role, fake experience, etc. And they got a corpo email. It took 2 days from LI profile creation.

After that, our CTO gave out a recommendation to the company to set their current employer to private to prevent spearphishing, and to change it back after leaving the company.