eSIM vs physical SIM doesn't matter - nobody does actual "SIM cloning", and if they did, the impact on the network would be "undefined behavior" so it's unlikely to work (as in hijack calls/messages from the victim) even if you could actually duplicate a SIM.
What happens in these attacks is that the attackers convince/bribe the monkey working in customer "support" to reissue a new (e?)SIM for the victim's account.