The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access protected user data.
https://support.apple.com/en-us/125112
https://support.apple.com/en-us/125111
http://seclists.org/fulldisclosure/2025/Sep/55