Users who link Apple ID and financial accounts may be vulnerable.