Yes. Anyone can be gotten with the right bait. Most people are never targeted and there's a lot of things that mitigate spray-n-pray attacks, but when it comes down to it, human cognition just has some fundamental exploitable weaknesses. It doesn't really have anything to do with intelligence.

For example, we're insanely good at pattern matching, but the flip side to that is we're not effective at spotting the rare subtle difference.

I've been targeted many times. I don't believe your assertion that my cognition has fundamental exploitable weaknesses. I think you're just making that up. Citation needed.