> According to the write-up, the vulnerability itself was fixed years ago in BlueZ That’s the BlueZ vulnerability. Which is certainly different from the iOS/ma

> According to the write-up, the vulnerability itself was fixed years ago in BlueZ That’s the BlueZ vulnerability. Which is certainly different from the iOS/macOS vulnerability given Apple has their own BT stack. The decision made by the Linux kernel developers and distribution maintainers not to enable the fix by default is theirs. It doesn’t imply anything about Apple’s behavior. If Apple wasn’t aware of this, they couldn’t have made a security/convenience decision at all. Without knowing more it seems like jumping to conclusions. The Linux maintainers may have made a reasonable decision based on possible fallout from breaking lots of devices.