That's basically just a research, theoretical attack vector. It doesn't mean it's viable for general purpose old school mass privacy invasion