What steps can be taken to secure a phone/Apple ID if Shortcutsactions is repeatedly accessing contacts but the app is not on the phone (I am fully aware of how to check) and no shortcuts have ever been created?
I’m grateful for everyone supporting the community, but the “that’s not possible / it’s something you did / that’s expected behavior” party lines for all things security-related are unhelpful and, often, demonstrably false.
Shortcuts has already had a high-severity exploit. Concerning issues for multiple users are arising again.
Is there practical advice for confirming a compromise or involving Apple to do so?