This would primarily be a concern if someone decided to expose the machine running HA to the Internet.

This is one of the reasons I’ve never used port forwarding for external access to anything run locally.

The vulnerability is still bad, but at least only accessible to my home network.