The M1 has a major security loophole that Apple can’t patch