> Targeted attacks against VIP users don't cause significant PR damage, so why go to all that effort?

Because VIP users include people who run big-tech. Ask Bezos if it's worth fixing bugs that only target VIPs.