Never used nor reccomended bitkey because of vendor lock in/not using the seed standard and on the first devices also because of not having a screen
That said I doubt this is actually a "critical vulnerability"
Probably someone looking for clout/making some noise or simply in the stressing over the securities misunderstandung/overreacting to something