To clarify, this would only have been triggered if you asked Gemini to parse your calendar events:

Once the victim interacts with Gemini, like asking "What are my calendar events today," Gemini pulls the list of events from Calendar, including the malicious event title the attacker embedded.

Is asking the bot to read your calendar events and “summarize” them really an improvement over just looking at the calendar yourself?