We have seen the vulnerability and it is us

from here and here

When even security researchers are successfully targeted, that's all the proof one should need that no one is immune to social engineering