Ars amongst a number of others had an article covering this [0] last week. Not that trivial to exploit but sounded relatively nasty if it was triggered, so better late than never. Though HomeKit overall has been a pretty significant disappointment and definitely feels like one of those semi-afterthought type of Apple projects at this point. Important enough or with enough internal sway to not get dropped outright, but not enough to get any serious effort either. Like the Mac Pro maybe, though that one is even more disappointing. So I wonder how many people make much use of it, let alone share with others.
----
0: https://arstechnica.com/information-technology/2022/01/5-mon...