Attack at sea is a whole different set of rules.
If an unidentified craft approaches at sea the captain is expected to warn off, if the warning is ignored he is expected to engage the target.
Yes, at sea the small arms are locked up. The crew is unarmed.
And the primary weapons on a fig aren't capable of locking onto a small boat especially at short range.
Plust, if the ship is operating under EMCON it won't pick it up on RADAR. If the tail is streamed they might get a hit. If they are in shallow water the tail is stowed.
That leaves the lookouts and the Mark I eyeball.
An attack like this has some chance of success.
Not a large chance, mind you. But it's not as far fetched as you might think.