But really, how big of an attack surface is there? By that I mean, how many people have external encrypted APFS drives? By my estimation, I would guess the num

But really, how big of an attack surface is there? By that I mean, how many people have external encrypted APFS drives? By my estimation, I would guess the number is smaller than people think for a few reasons. 1. How many people who aren't technically saavy have external drives at all? If they do, it's probably a Time Machine volume. Which leads me to my second point... 2. Directory hardlinks - the tech which makes TM work - don't exist on APFS, so a fair number of these drives are probably still using HFS+, and last I checked, external SSDs of any sufficient capacity are still pretty costly, which brings me to the last point... 3. Given that APFS is really SSD-only (with a small asterisk for Fusion Drives), converting a TM volume on a spinning disk is a recipe for pain. I'm not excusing the bug, only reiterating that its effect is probably less than you might imagine among people who aren't nerds (or HN readers for that matter).