Also possible if they gave malware on the computer, and it modifies search results in the browser. That’s always seemed like a serious vector although I haven’t heard much in the way of in the wild exploits.
It is, which means it targets higher net worth individuals. I just listened to a darknet diaries episode where they talk about how much these attacks cost to execute - some are $10-100k per target.