There are a lot of imaginative attacks. The problem is that, you can’t mount most of them without being detected (and arrested).

Somebody is going to find that some of the USBs are malicious and will get to the attacker through Amazon.