I agree that delivery systems are no piece of cake, but if I'm worried about nukes I'm more worried about terrorism than I am about nation states. From that lens, fissile material is indeed hard to make. The Iranians were pulling their hair out when seemingly fine centrifuges mistimed due to malware. If it were easy then they could have tried a different approach.