There's something very off about this story, especially since it doesn't even attempt to mention obvious scenarios like "what if I have WiFi turned off?".
If iOS would actually try to find WiFi networks with WiFi turned off, that would be a much bigger story than some exploitable vulnerability. This whole story smells of sensationalism over facts.