I am not sure whether this example is a good one. While you can probably do interception and the like in a moment's notice, planting an implant is a different thing. As zero-click exploits are still rare, you need a spear phishing or the like, meaning that a person is already likely under surveillance.