Do you think someone who clearly doesn't know what passphrase or multi-sig is knows how to insert a message into their transaction? My opinion is that most of these messages come from scammers who play the victim card in the hope that some rich donor will see it and send a big donation.
I think one thing has nothing to do with the other.
Aside from the most paranoid (and rightfully so), the vast majority of people didn't add a 25th word to their seed created in a hardware wallet, considered reliable by the overwhelming majority of the community.
Otherwise, we'll be jeopardizing the entire seed system, which also doesn't make sense.
Therefore, a person not having the passphrase does not mean that they had little knowledge about Bitcoin.I don't understand how you think adding a passphrase would compromise the entire seed system? However, I will not agree with the fact that someone who has not added additional protection for his seed understands the risks to which he is exposed, whether it is risks as in the case with the CC
hack, or risks arising from a physical attack/theft of the same.
Is it easier to add a message to your transaction or set a passphrase in your wallet?
Most people assume that it is a person, but isn't it possible that it is not a person but an advanced AI that was tasked with trying to hack a hardware wallet? Most people think that AI capabilities are what we see in popular models mainly from US companies - but the same companies and the US government itself have admitted that China, for example, has far more advanced AI models that are capable of much more than we can even imagine.
That's a plausible scenario. I'd never thought of that. Could some AI be running loose, stealing money, and even the AI creators themselves don't know about it?
We're already entering the realm of conspiracy theory. 
It may seem like a conspiracy theory, but the AI used by the general population today is ridiculously intelligent compared to what exists at the military-intelligence level, to the point that there is talk that some countries are using special tools powered by super AI that is starting to make decisive moves instead of humans.
The question is whether any AI has already managed to escape into the online wild, but even if not, it's only a matter of time before it happens. Imagine that same AI looking for ways to fund its own development, and what better way than by hacking cryptocurrencies?