Yeah, it's going to be hard for someone to pick an arbitrary target and get into a position to exploit it, but there are an enormous number of people who are in the position to exploit someone.

One rogue employee at Cloudflare could MITM half the Internet if they are able to get around whatever internal safeguards exist.