I think this distinction is a good one, and I'll try to be more attentive to it when writing about this in the future.

Hopefully the risk for the attacker from the two kinds of attack are gradually converging, due to pinning and especially Certificate Transparency.