Stealing one thing from the store isn't hard, but the nature of vulnerabilities like this one means there isn't much additional technical challenge going from stealing one thing once to stealing everything a million times. To continue your store analogy, imagine if it's just as easy to make an army of robots that steal everything as it is to steal one thing personally.