Attacks like this have been in use since long before that leak.

See all the Sandisk U3 drive based badusb payloads that people could cleverly hide into all sorts of form factors.