The deadliest attack on Saudi soil in over a decade — 12 killed, 309 wounded at Riyadh's King Khalid International Airport on Saturday — is not a story about one lucky missile. It is a story about the structural mismatch between a $100bn+ defence architecture designed for state-on-state deterrence with Iran and the attritional, mixed-salvo tactics of a non-state actor firing from 1,000km away. The Houthis are exploiting this gap with increasing precision. The group's arsenal, while largely derivative of Iranian designs with some Chinese technological influence, has evolved into a genuine layered threat. Medium-range ballistic missiles like the Palestine-2 (estimated 2,000km range, hypersonic terminal phase) and the Toufan (a rebranded Iranian Ghadr, 1,350-1,950km range) sit atop a stack of shorter-range Burkan and Badr variants. The key innovation is not any single weapon but the tactic: mixing drones and missiles of varying speeds and flight profiles to saturate defenders' tracking and engagement capacity. This is not about building better missiles. It is about making the defence problem computationally and logistically harder. Saudi Arabia's air defence posture — built around US-supplied Patriot PAC-3 and THAAD systems — was oriented primarily toward the Iranian threat axis. Analyst Wolfgang Pusztai notes the kingdom is likely reorienting some of these assets toward Yemen, but reorientation creates gaps elsewhere. The deeper problem is interceptor economics: each Patriot missile costs roughly $3-4 million; each THAAD interceptor runs over $10 million. These stockpiles were already depleted during the early months of the US-Iran war. Riyadh has reportedly reached out to allied nations for supplementary air defence deployments. The Houthis are operating under severe constraints of their own. A UN-mandated arms embargo, a years-long Saudi blockade, and a multi-front ground war in Yemen all constrain their missile and drone inventory. Pusztai assesses the group likely has only a limited number of short-range ballistic missiles remaining, which would preclude sustained saturation attacks. Instead, the Houthis appear to be shifting toward single-missile strikes on less-defended civilian targets to maximise strategic and media impact — precisely the kind of attack that killed 12 at King Khalid airport. The Iran connection is the load-bearing element. Nawaf Obaid of King's College London notes the Houthis have demonstrated little indigenous technological innovation; their capabilities are essentially Iranian-supplied. Yemen's government forces allege the IRGC is actively helping the Houthis develop loitering cruise missiles — a capability that would add another layer of complexity to Saudi defence planning. The Houthis have also targeted Israel (2,000km away) and allegedly Israeli-linked vessels since October 2023, demonstrating range and intent well beyond the Yemen theatre. The asymmetry is the story. Saudi Arabia, the world's largest crude oil exporter and a G20 economy, carries global responsibilities that make every successful Houthi strike disproportionately visible and economically consequential. Flight suspensions, travel warnings from the US and UK, and the psychological toll of airport attacks all impose costs far exceeding the price of the weapons used. The Houthis warned people to avoid Saudi airports on Sunday — a messaging play that costs nothing and compounds the disruption. The Saudi air campaign has focused on Houthi missile depots, underground installations, and drone production facilities, with claims of inflicting enormous damage on the group's military capabilities. But the core dynamic remains: a well-funded state military burning through expensive interceptors against a non-state actor whose weapon costs are orders of magnitude lower, whose supply lines run through Iranian networks designed for exactly this kind of proxy warfare, and whose strategic calculus rewards even occasional penetration of the most sophisticated air defences money can buy.