You're describing the sort of operation a nation-state's intelligence services would plan, and I'm describing the sort of thing anyone from a crazy ex-lover to

You're describing the sort of operation a nation-state's intelligence services would plan, and I'm describing the sort of thing anyone from a crazy ex-lover to an unethical competitor might do. Your scenario is obviously more likely to succeed and less likely to be detected, but mine works more often than not. Being sure I have not done anything to attract the attention of an intelligence agency is not sufficient to be sure nobody has gained physical access to my laptop and installed malware.