To be clear, and reiterate, I stated "easy" in my top comment, not legally. "Legally" is irrelevant if you’re a motivated threat actor. Laws are there to dissuade the lazy or unsophisticated, and to prosecute those caught. ~50% of murders go unsolved in the US [1]. Firearms are heavily regulated in NYC, and yet, there are hundreds of deaths per year from them. Therefore, I believe availability (regardless of legality) is an important data point to surface as part of the discussion.

[1] https://www.npr.org/2023/04/29/1172775448/people-murder-unso...

(these stats are grim, I admit, but important to contextualize my perspective and thesis about the risk)