I think that makes sense. The change is not really in the kind of attack—anything the agent can do a human attacker could also do—but in the amount of effort and expertise required to design and scale up the attack.

It’s a quantitative rather than qualitative change… but also, “quantity has a quality all its own”.