Apple Podcasts is auto-opening to random shows, raising potential XSS risks and privacy concerns for macOS users, experts warn.