There are a lot of imaginative attacks. The problem is that, you can’t mount most of them without being detected (and arrested).

Somebody is going to find that some of the USBs are malicious and will get to the attacker through Amazon and tracing the exchange of physical goods.

The USB attack used to be used in targeted attacks.