The speaker highlights the contrasting goals of phishing awareness and penetration testing. While the former aims to educate employees to avoid real-world phishing attempts, the latter seeks to obtain sensitive information or install malware to test security implications on a company-wide level.