[Someone]

> I accidentally found this vulnerability that when you remote login into a Mac using Screen Sharing

> Did you expect someone next to your machine to see everything you do

The “Sharing” part of “Screen Sharing” seems to imply that, doesn’t it?

> and be able to take control when you remote into it?

That’s more surprising. I think the main issue is that, if you start it remotely, the distinction between screen sharing and Remote Desktop isn’t obvious.

Edit: Apple’s support page (https://support.apple.com/en-gb/guide/mac-help/mh14066) only mentions initiating screen sharing from the computer whose screen is being shared, and is clear about the reverse:

“While your screen is being shared, the user of the other Mac sees what’s on your screen and can open, move and close files and windows, open apps, and even restart your Mac.“