Wouldn't the wrench attack in this instance just make you type your password to your broker, sell the ETF, and then transfer the money to some third party bank account?
The reason why it's more appealing for criminals to do it with crypto is that claw-backs are essentially impossible.