George Mason University researchers found a critical vulnerability in Apple's Find My service that can transform any Bluetooth device into a tracker without the device owner's knowledge or consent.