Apple homekit, false presence detection, security issue - please help to reproduce

Hello,

I haven't found any forum for Apple homekit. As this service is iCloud based, I think this is the right forum.

Can someone please help to reproduce/confirm this issue?

Problem:

When an iOS device user and iCloud member of Apple homekit is physically away from home, on cellular network, connects to homenetwork via VPN, Homekit thinks user is no longer absent and starts home/presence automation, e.g. switches lights on, changes heating configuration and unlocks doors. This happens while user is physically absent from home. User get's no info on presence automation has started.

Steps to reproduce:

• Setup VPN to home network
• Setup coming home automation, e.g. switch on homekit compatible light bulb
• Leave home
• While on cellular or external WiFi connect VPN to home on iOS device

Expected Bug Result:

Light bulb switches on.

Suggestion:

Apple Homekit needs to track user location by GPS only. Network presence is not suitable for homekit.