Hopefully they are on top of it.
Since the system volume is sealed & applications are signed + scanned for malware, I would hope any Xprotect link would be mitigated.