Why do cyber attackers commonly use social engineering attacks?

AAttacks can go undetected for a long time since they don't require user interaction.

BAttackers can obtain what they want while bypassing most technical security controls.

CAttackers can easily find unpatched applications or systems to exploit.