I submitted this vulnerability to Apple’s Bug Bounty. After a rejection, I decided to fully open-source the details unless Apple addresses it or significant progress is made. My goal is to raise awareness and help strengthen defenses across similar systems.