I think it's the Webkit vulnerability CVE-2022-32893 that is of concern. As I understand there's this one and the other vulnerability is in the kernel which req

I think it's the Webkit vulnerability CVE-2022-32893 that is of concern. As I understand there's this one and the other vulnerability is in the kernel which requires physical access to exploit. The former lets nefarious actors compromise devices without physical access and is in fact being actively exploited in the wild (by Apple's own admission), so it's encouraging to see that BoA is taking the initiative to go so far as emailing users to update to keep them safe.