We are talking here about someone at least technically savvy who would know if they are of interest or not (ok, maybe not). They'd also be able to monitor their outgoing traffic.
We are also not talking about a potential Russian product that will reach into large number of homes since — being paid and privacy focused — it is already a niche product. So getting into someone's home of interest would need a lot of luck, and there are probably better ways to do it.
The current observed strategy, broadcast by ASIO chief Mike Burgess, in 2025, is "if there is a way in, use it". Being niche is not a defense. Being a nobody is not a defense.
Every product is useful in some way.
Targeting everyone, rather than some, is precisely how America's government networks were breached. Everyone is of interest. Because everyone is connected to someone else. Six degrees of separation, or the real world equivalent, means that everyone provides a soft target for achieving access to someone else.
There are better, more targeted approaches. Which is why both are done. One doesn't preclude the other.
We are also not talking about a potential Russian product that will reach into large number of homes since — being paid and privacy focused — it is already a niche product. So getting into someone's home of interest would need a lot of luck, and there are probably better ways to do it.