“before the patch cools” is a little too real. Yikes.

40,000 Macs with Screen Sharing reachable from the Internet is the part that makes me wince, not just the 4-hour exploit turnaround. Pre-auth root on a service people leave on for convenience is a very old story wearing a shiny macOS badge.