Did you miss my point? You can mine offending blocks with our without the controversial change of v30. So a state actor waiting for v30 is perhaps not so sophisticated.
Discussion
This attacker is playing the long game, waiting for the file storage use case to be entrenched. Timing of the attack is key. The goal is to force a fork and select the most easily controlled version. Kill freedom money by making self-custody and node running difficult.