There was that brief period where repeatedly pressing enter on the Lock Screen with an empty password field would eventually let you in as long as you had never seen a `su` password. And if I recall there was also a bug where the password hint would show your password in clear text?
Even if it's already patched, the fact that it was exploitable for years make it very much relevant. And of course, those with older computers that can't be updated to the latest macOS are still vulnerable.