The CISA alert may be referring to 17.2. After all, iPadOS 17.2.1 did not happen yesterday. And any Safari-based vulnerability that affects iOS and macOS would presumably also affect iPadOS.
Presumably. But there have been odd differences. I know it’s a different system, but for some reason iPads were not affected by the Bluetooth spam attack. One would think they would be. I thought it was strange there was no iPadOS update as well.