I don't know if the authors mention it, but it seems like you could combine this with the vishing attack (https://news.ycombinator.com/item?id=21306612 https://

I don't know if the authors mention it, but it seems like you could combine this with the vishing attack (https://news.ycombinator.com/item?id=21306612 https://news.ycombinator.com/item?id=21306612) by using silent light commands to get a malicious app installed. Fun stuff...