I believe that is saying understanding ECC function details makes it easier to exploit EEC devices, not that it will be easier than exploiting non-ECC devices.

I believe that is saying understanding ECC function details makes it easier to exploit EEC devices, not that it will be easier than exploiting non-ECC devices. The ECC code word is bigger so it is a larger target, but you have to flip multiple bits to cause pain. If you have 2 bit detect, you need to flip three bits to get something that corrects to a different value.