This is true only because today the borders between RISC and CISC do ot exist anymore, modern technologies would decode everything into uops anyway. But in 1980s and early 90s, this was not true. CISC was indeed more difficult to scale.