This outfit has changed the term "backdoor" to mean "any undocumented feature". The findings reported are absolutely not a backdoor in any conventional usage of the term. One would need to flash their own code to the micro to make use of these features, which is the normal operating mode for any micro device.
This is nothing other than a security research team trying to get some attention by crying wolf.
This isn't a backdoor, it's just an undocumented debugger in the HCI stack. You still need a physical UART connection to the device AFAIK. The exact same type of connection you use to program and debug the device normally.
Giving biometric data to Sam Altman has to be one of the worst ideas we could pursue. Not only is Worldcoin a know scam, rightfully being banned in several countries, Sam and OpenAI are one of the major reasons realistic-looking misinformation became easier to proliferate.
He’s done enough damage, let’s not make the creator of the problem in charge of the “solution” that benefits him too.