> It kind of is though?

If anything it's person hacking. There are still plenty of ways to go after the tech directly, but as you say generally the weakest point in a system from a security standpoint is the bag of meat operating it.