“The attack shows that pointer authentication can be defeated without leaving a trace, and as it utilizes a hardware mechanism, no software patch can fix it.”
Pointer authentication is the last line of defense once everything else has failed. MIT beat it by guessing the code with speculative execution, and the PAC is small enough to try every value. Apple says it poses no immediate risk “on its own.” That’s true of every exploit chain until someone adds the other link.