What a terrible article.

“Multiple” packages mentioned in the title, but they’re unable to actually name more than one in the article…

//edit
Actually, they did leave a link to the mailing list thread at the very end.
I should learn to read the entire article…

Oh, it’s trickling alright.

Except it’s piss.

Pretty sure that’d be illegal under GDPR.

You shouldn’t be exposing any self-hosted service to the public Internet, unless you’re willing to also monitor for potential breaches.