

Yes, and additionally if I’m reading this correctly, this attack would only work for people whose security settings are to run any signed code from trusted developers. One of the standard options is trusting only App Store distributed code for which this attack would not work







Sure. And I don’t have that setting enabled personally, but I am careful otherwise and I tell my family members who don’t know better to keep it on.