I would say fortunately, but I agree. These security flaws need to be analyzed but I don't think it can compete in threat level with the usual phishing mail.

Analysis of such vectors is important but the threat is limited. I still favor running encryption in software and find hardware support often quite dubious because you can never be sure here while any runtime attack can just as well be mitigated on a higher level. Doesn't mean it is more secure out of the box but security is about trust as well.