Oh, right, that's a good point. Thanks!

I think that threat was mostly directed at government and large business servers instead of retail consumers, but you're right, that it was also zero-click.