Typically what I see are low effort attacks where an attacker puts out an obfuscated file online (like fast.and.furious.5.mov.exe) in an attempt to trick the user in executing the file. Most of the risk running comes from running pirated software where cracks and activators often come bundled with other malware. Or running outdated Plex server that is exposed to the internet… Take a look how Lastpass got hacked…

State sponsored hackers are a very small percentage of the threat actors out there. Also - they don’t need to exploit a zero day if you are willingly launching something on your machine.