I mean absolutely. What I'm cautioning against is reading too much into the overall security posture of mass market devices (or intelligence agency intercept capabilities) from this advice.

This is closer to "if you can pay a team to go and find a way into that specific person there" then they're going to succeed.

But you're already close to "infiltrate the window washing company, and stick solar powered listening bugs to every window on the upper floor suites".

Fun Fact. I've been in to places where it was an almost impossible feat to achieve without substantial background clearance checks. Chatting to the cleaners around the coffee machine during down times showed a shocking disparity between the checks run on 'obvious people' vs. the 'invisible people'. (My personal viewpoint on life is that we are all just people doing equally important jobs, i.e. Cogs in the Machine, regardless of pay rates).

Pen-Testers use the 'cloned cleaners' pass' thing all the time and it works surprisingly well.