Required 10h access to the victim's Yubikey, to know the exact account targeted, 11'000$ of equipement, disassembling the key and replacing it in a new casing after the cloning.

I guess most people are fine. 

 Doesn’t really matter; this is the second time Infineon fucked up basic cryptography