As I pointed out here in February 2022, people who gained brief direct or remote access to a machine can change the volume step or other things regarding sudden large changes to the sound volume (for example via xbindkeys or shortcuts).
This can directly cause lasting physical harm via ear damage to one or many people at once or damage speakers/headphones. I don't know why it's not considered a severe urgent vulnerability. Root access is not even required for the pactl command(s). However, nothing is being done about it at this repo which I think is very irresponsible.
Which measures, other than building in some mitigation in the pulseaudio code, could be done to prevent exploits of this from actually occurring in the wild (it seems unknown if they already have)?
I'm of course not asking about which measures could help prevent malicious actors from gaining access to machines or have pactl commands being run at certain times. This is from the standpoint of physical security (protection from harm to people's bodies) and also from the stance that more lines of defense would be better even if volunteer devs of that repo finally engage with this issue for a new package upgrade so that if one measure fails or is vulnerable, another one still holds.