ChipTuner on Nostr: So this is just an RCE? So even nip46 (bunker) users would have their session keys ...

So this is just an RCE? So even nip46 (bunker) users would have their session keys stolen correct? I don't use amber, but I assume if users relaxed Ditto permissions the RCE would allow carte blanche signing?