What’s scary is that this attack doesn’t require any technical sophistication. You don’t need zero-days, you don’t need exploits — you just need money. Feels like we’ve shifted from “can you break in?” to “can you buy your way in?”, which is a very different problem.

We haven't shifted from anything; this has always been the case.