Iran has retained significant offensive capability, but civilians and critical infrastructure remain largely exposed.