This is true for literally everything encrypted. Security is always a function of time and effort. The name of the game is being not worth the effort.

When the effort becomes trivial, so does the justification for it. Doesn’t cost them any of their own money.

Once again its not as simple as oh its easy now. It's highly dependent on how much time has passed, who you are, what your worried about... etc... making it out like everyone is on the same plane makes the threat assessment worthless.