Even the upper bound for that seems well worth it for well-funded attackers if the target is juicy enough.