That’s doubtful, they need the user to be there (and sleeping) for it to work.
If you don’t have that feature enabled you don’t need the glasses.
That said it would be quite obvious that this attack vector would work, I don’t think that people just realized what happens when you put on glasses and train FaceID to unlock with them.
It took like 10+ pin unlocks until FaceID comfortably recognized both my sun and reading glasses since I don’t wear either that much.
If I never wore them it would likely mean that this would never work at all since there was no pin confirmed unlock which updates the model with glasses on.