Very accurate hits if these really were Iranian KH-55 copies/improvements.
If these were actual cruise missiles, the tanks would have been blown wide open instead of having neat little holes punched in them, which suggests small sized ordinance with limited payload.
Furthermore, if these were cruise missile hits, some debris are bound to have survived, which would be irrefutable proof of state involvement, hence it would be an extremely stupid thing for Iran to do.
All of that rules out cruise missiles in my view.
As for how the attack occurred, well personally I would be looking at small boat activity near or around the Saudi Coast at the time of the attack.
It’s relatively trivial to rig some catapults on small/medium sized fishing boats; or even just strap booster rockets to the back of them and launch them from a metal rail like bottle rockets; sail the boats to the Saudi coast, and then launch suicide drones.
That is probably how the attack bypassed all of Saudi’s defences, as it would have come from the east/north east direction, whereas Saudi air defences would have been concentrated towards the south. If there were any air defences that far from the Yemeni boarder.
That of course does not rule out Iranian involvement, but it would be an order of magnitude more difficult for anyone to prove Iranian involvement than cruise missile strikes, which is the whole point.
