Experts make mistakes all the time, fail to see hidden risks, like Challenger explosion. This will never see mainstream adoption at this rate. If the hacker is smarter, being smart is not good enough.
Management chose not to listen.
Experts did make mistakes for the challenger explosion, but they did much better than the average person. Put 1000 people at complete random into a room and say design and build a rocket, I suspect they won't even get to the build phase after several years.
When it comes to something everyone should be able to do, an expert making a mistake is a bad omen for the rest of us.
Hardware all the way.
I have my pgp key on a yubikey, my crypto on a ledger. My passwords on a mooltipass.
There are few mistakes I could make leading to this kind of compromise. Perhaps none!
That 1000 random people will build it, get it on the launchpad, and press the button. That's not the problem. It's getting to orbit (and back) that would be highly unlikely.