Did Hyprland Ship A Major Plugin Vulnerability?

Hyprland is back in the news once again because of a "vulnerability" but is it really as bad as it's made out to be or is it being a little overblown========...