I think it points to social engineering being easier in practice to carry out