In security, user education is part of the traditional formula but user training is not. The difference between the two is the level at which learning takes place. User education is about teaching users to protect themselves, not unlike sending users to nightschool. User training is about conditioning users into protecting themselves.
I think it's time to add user training to our toolbox because it's just too damn effective to ignore. And user training doesn't have to make users feel like a dog being trained. Give it a better name, like user education-by-example, and shape it as a game of sort with rewards, perhaps reduced rates or fees, for completing the obstacle course successfully.