See also this interesting series by Google Project Zero https://googleprojectzero.blogspot.com/2021/01/introducing-i... about some recent Chrome 0-days that seem to have been exploited by “Western government operatives actively conducting a counterterrorism operation”.

This is to say that with enough time, a sufficiently sophisticated and motivated actor can always find 0-days and achieve their goals.

The related article was discussed recently: https://news.ycombinator.com/item?id=26590862