I see comments here expressing skepticism that any but a nation state threat actor would try to pull off an exploit taking advantage of this, but considering th

I see comments here expressing skepticism that any but a nation state threat actor would try to pull off an exploit taking advantage of this, but considering the possible targets, that is exactly who you might be looking to defend against. The clearest target, to me, is air-gapped systems that also disable USB ports, but still allow workers to use external monitors. That is effectively any classified computing environment, and clearly the threat actors targeting state secrets are overwhelmingly going to be other states.