According to the CVE it looks like my XT8 is already updated beyond the affected version. It says through version 3.0.0.4.388_24609 and mine is version 3.0.0.4.388_24621.

I also noticed this vulnerability was posted on May 29th with the last update being June 13th. Seems like this a report that’s already outdated.

Mine was too complicated to file for free because I have retirement investments? Seems like a silly reason to force someone to use a paid service.