"It would work in hotels,"
This is clearly not a casual attack.
So professional crims looking to harvest high value targets creds in expensive hotels might find it quite useful.
Likewise anyone else who's a paid spy might find it useful. Not necessarily a go to approach, but in the toolkit.
Maybe the takeaway is "Autofill is not a good idea for login details" ?