Concur.
It’s the equivalent of parking a nice car in an alley and leaving it unlocked with the keys on the dash. Eventually someone will steal it.
Yes BUT...it’s the ‘eventually’ part that is problematic.
In this case it’s a one-off event, with specific circumstances, and this guy walked straight into a spot where he could get away with it.
It’s one thing to have a one-off specific vulnerability, it’s another for somebody to immediately know where the vulnerability is to exploit it.
Eventually? Have you ever watched bait car?
We’re talking seconds.