It was as sophisticated as it needed to be. The collective that did it have hit stronger targets in the past. They were aided by pleroma being fairly insecure. If the vulnerability they used had been patched they would have found something else.