Not directly related to the topic, but after skimming through the readmes of the various exploits HT used, it seems to me, that they rely heavily on social engi

Not directly related to the topic, but after skimming through the readmes of the various exploits HT used, it seems to me, that they rely heavily on social engineering and rather amateurish mistakes done by the targets (opening fake news sites, download and open documents and apps, etc.) as well as certain assumptions about the system like flash beeing active, unchanged default passwords on jailbreaked iphones … While no doubt, this works very well for industrial espionage and probably against journalists, I have a hard time believing, that it works well against actual criminals who must expect beeing targeted all the time. Or am I overestimating the tech savviness of modern criminals? All assuming the agencies are not messing heavily with the whole network at the same time, which i think is pretty dependent on the country it is used in.