What about this type of spying? (Also frontpage of HN right now, and done with similar tools i.e. Lumma malware-as-a-service)? https://news.ycombinator.com/item?id=40534868
The problem is, when the vulns exist due to hand-rolled parsing, you don't get to choose who the attacker is.