As far as I know eye tracking isn’t available in VisionOS[0]

This article snippet is behind a paywall but it seems like it’s talking about the eyes that are projected on the outside of the device.

So basically it’s no more of an exploit than just tracking someone’s actual eyes.

0: https://forums.developer.apple.com/forums/thread/732552