There's a shelf life to this attack for each distributer though. You'll eventually distribute to users who _do_ understand what's happening and they'll raise alarms.

With the article, it can go unsuspecting for years even simply waiting for maximum distribution and then a coordinated attack.