Required 10h access to the victim's Yubikey, to know the exact account targeted, 11'000$ of equipement, disassembling the key and replacing it in a new casing after the cloning.
I guess most people are fine.
Discussion
Doesn’t really matter; this is the second time Infineon fucked up basic cryptography