That there is a preexisting way for people to get hacked doesn't seem to be a reason to dismiss other, new ways for people to get hacked.
And again, I'm not saying it doesn't matter. All I said is that it's probably not the #1 thing to lose sleep over.