You're misreading me. It's organized identity theft driven by pin-compatible RCE exploits. Is there already an identity theft ring powered by Mintlify exploits? No? Then it doesn't matter.

The subtlety here is the difference between people using an exploit (certainly they can) and people who buy exploits for serious money.