pull down to refresh

in their post they said its nothing to worry about unless you turned feature on being a new feature they come default off. Just wanted to let people know who did enable it that its a security issue.