Soatok covered it very well here: https://soatok.blog/2024/08/14/security-issues-in-matrixs-ol...
I'm quite sure most of these issues were fixed by now, but the fundamental issues remain, at least in this federation.