How much harder would this attack have been with a fully patched OSX Mavericks target and an Apple Time Capsule router?
I don't know about the vulnerabilities in the Time Capsule router, but from my understanding the only router firmware even remotely worth a look in terms of security would be OpenWRT.
but I figured I should ask this guy, sounds like he knows what he's doing.