As vulnerabilities go, they don't come much bigger than this.
It was demonstrated that the servers of both Tesla and Apple were vulnerable to this exploit just by changing the name of your car/phone. Minecraft is also vulnerable. That by itself should really be a story.