No 0-day here, more of a supply chain attack, but your point stands. This actor was determined