Nice, thanks! I forgot that 404 Media is paywalled.

Main content is that Apple has been jerking around this security researcher for about a year, and they finally gave up and talked to 404 Media. They didn't disclose the vuln itself but they did demonstrate it with the reporter's account.