Dunno what counts as 'proper' patch but they exist from two days before the article was written.

Physical access is complete access. As it has always been.

These CVEs are for folks who maintain fleets, not your barely maintained desktop.