AFAIU you first have to login via ssh(or similar) as normal user to the phone before you can gain root access I don't see it as critical on phone but worse on web sites.

"The exploits can be used against Web hosting providers that provide shell access"


And how many of you give out ssh access to your phone?

However I hope SFOS next release has the fix.