Hackers don't target machine identities.. They target leaked credentials (of any kind).
Good luck though, there is a lot of funding in this space lately, and nobody is knocking it out of the park yet. The tech industry still generally sucks at IAM - I don't think our "machine identity" problems are any different.