You're missing the psychological factor
Actual damage may not be as big an issue as showing that they can deliver a payload to a target. You could make a damn big impression on a security system by simply having the President come up to the podium for a speech and finding behind the podium a completely harmless and empty box that has "BOOM" written on it.
