This is the new 'cheap drone' tactic on full display and it reveals I think what most people don't realize and that is AA networks are not comprehensive.

Most places have little to nothing in the way of AA defence.

Especially civilian infrastructure.

If Iran has enough stockpiles, this will be 'not good' and they could play an ugly asymmetric game here.

People get upset when their water doesn't run, or the shopping mall is hit by drones, toilet won't flush. Etc.