There are some tweaks from airline to airline, but anyone who flies regularly has seen this general outline of events occur countless times.

An attack can be designed against any vulnerability. Whether that attack becomes practically executable remains to be seen.