Undoubtedly a poor design choice, I appreciate that you bring some attention to it.
Facetime calls are instant. Imagine you clicking a link, your phone calls my (attacker) account, I instantly pick it up and (yes) save all the frames. Now I know how your face looks like and maybe where you are. Hello pretty!
Yes, it works. I tried.
Can you please provide some evidence that this is practically possible? Last time I used Facetime it took quite some time before the connection was established.
I did my test on WiFi which results in almost instant calls for me.
Set your computer to catch the facetime call and answer it automatically (check this: https://github.com/PaperCutSoftware/teleportme/blob/master/t...).
Capture your screen continuously and if you might get the first frames of the call.
It's all about what people do when their phone starts calling by itself. Most people freeze which results in a successful attack.
