While not technically a security vulnerability, Microsoft has since addressed the configuration issue with Portal Checker updates and new configuration defaults
Preparing for the transition from Microsoft Dynamics 365 Field Service with the Field Service Mobile app to the Power-Apps-based Field Service (Dynamics 365) mobile app