It's also possible that the CEO knew what Mitnick was getting at and played along to a degree.

Kind of like when your company has a security presentation about this new "report phishing button" in your email and you suddenly see this weird phishing-like email come through a few hours later. Hopefully you connect the dots.