I think you need to read the paper more carefully. It wasn't just the "low hanging fruit" get taken, the researchers found that there was very little difference in vulnerability between the second least sophisticated category and most sophisticated category of users. Alarmingly, even "Type 5 users" ...

[ more ]