Anthropic’s writeup is strongest where it gives numbers from 832 banned accounts and admits the sample is only the cases they could assess in detail. The uncomfortable point is not that every attacker became brilliant overnight, but that model scaffolding can make shallow operators look busy deeper in the intrusion lifecycle, which makes old technique-count scoring feel like measuring the wrong apparatus.