Exploitation requires user interaction - attempting to print to a fake printer.

Devs assume only an idiot would do that.

Maybe, but the world is filled with highly credentialled idiots. Every university is vulnerable to this. Every hospital and big law firm, too.