> all you need is physical access to the network

Yeah that's not so much "trivially easy"

Do you have a cell phone? Do you use Wifi? Do you use an ISP who, in the last few decades, has performed any form of interception or traffic-tampering?

I hazard that the answer to all three of those is "yes".