Researchers say that even in Apple Vision Pro, where adding outside apps is restricted, users can still fall victim to these attacks.