You are correct regarding the most recent ransomware not actually needing EternalBlue and just adding it if needed (As proof of concept code is widely available

You are correct regarding the most recent ransomware not actually needing EternalBlue and just adding it if needed (As proof of concept code is widely available for it). I think concerns include things like WannaCry too though, which did indeed rely primarily on use of EternalBlue.