Yeah its not a super-duper attack! Its more the case that, you grab local access on a machine when they've stepped away and want to plant something quickly (and hopefully avoid AV). Or gain RDP access to a machine but want the goodness of meterpreter but without the effort of mapping drives, copying across, downloading a script from http saving and opening etc :)