Just like the evolution of sim swapping and how it went from hijacking celebrity accounts for a day to stealing millions from crypto investors, cybercriminals slowly realized that it's far more easier to get personal data through bribing/hacking companies (telecoms, amazon) or even by directly sending emergency data requests from stolen law enforcement email addresses.

No amount of opsec can save you from corrupt employees making below minimum wage.