How is this not a P1 thing in the iOS/iPadOS/macOS/security teams at Apple? Seriously? Bare minimum, why didn't they let people know about this? We know the whole "we care about privacy" thing is marketing fluff now but holy F this is just unacceptable.
And this kind of an issue is exactly why Apple needs to stop screwing around and do the following things ASAP:
1. Decouple Safari from the OS so that it can be updated independently to fix critical issues like this and deploy to all customers quickly
2. Let other browser engines on the platform for fuck's sake!