In my opinnion (this is a non-objetive question) they are even less protected.

If you read a phising mail in your own language (or any other language that you understand) from someone that claims to be "your bank manager" (for example) you may understand better what's going and you won't click the link.

But if the mail is in English, and you don't understand the language properly. Then you may, unconciously, click the phising link to the fake bank website. That's due to the well-known fact that English is the international and business language (even if you can't talk English, you know that fact).

That's more or less how Social Engineering Works.

In my opinion (this is a subjective question) they are even less protected.

If you read a phishing mail in your own language (or any other language that you understand) from someone that claims to be "your bank manager" (for example) you may understand better what's going on, and you won't click the link.

But if the mail is in English, and you don't understand the language properly, then you may, unconsciously, click the phishing link to the fake bank website. That's due to the well-known fact that English is the international and business language (even if you can't speak English, you know that fact).

That's more or less how Social Engineering works.