Looks like it's much worse, they get more information due to exploits, and they can take full control of your machine.

Article on the CitizenLab website: https://citizenlab.ca/research/how-discover-tech-turned-targ...