Only if that’s how you approach the hack. Google “social engineering”.
I got all the way into a police data centre once just by talking a very distractedly techie into giving me the keys. Then I saw a whiteboard with a 24 digit password on it.
Not exactly difficult.
Good post.
In most workplaces (.gov or private) there are incredibly boring courses (in person or on-line) on data security that are mandatory every few months or so.
If there have been no security breaches for years everybody gets complacent.
Everybody.
They become easy marks for social engineering by someone with a lot of self-confidence and strong people skills.