Comment by plc

Disclosure: I'm the founder of AuraVision, which publishes The Signal (the linked site). Posting because the underlying Northeastern/Consumer Reports study is a significant privacy issue worth a technical discussion here. The site has a product point of view, but the reporting and primary sources stand on their own — happy to link the raw sources or dig into specifics in the thread.