No, but that just means the internet isn't the attack surface. If a machine on an intranet gets compromised by some other means, this is a vector for that mach

No, but that just means the internet isn't the attack surface. If a machine on an intranet gets compromised by some other means, this is a vector for that machine to attack anything it can reach with SMB.