Well, we do have mitigations. They're not good ones, but they're mitigations: - Be more paranoid about allowing r/w direct access to your computer. - Be prepa

Well, we do have mitigations. They're not good ones, but they're mitigations: - Be more paranoid about allowing r/w direct access to your computer. - Be prepared to power off or otherwise halt your machine if (on 10.13.12) you see unexpected logouts or similar. - Safeguard your data and/or consider moving it off of the machine or not using it in some situations. None of those are great things to rely on or to have to do. A real working patch or detection mechanism would definitely be better. But that's not the same as "no mitigations" whatsoever.