And you don't have -- as an attacker -- you don't have to deliver this payload by a USB stick, as we saw it in the case of Stuxnet.
Y no tienes (como atacante) que diseminar esta carga con una llave USB, como vimos en el caso de Stuxnet.