New AirDrop and Quick Share flaws put over five billion devices at risk, but keeping file sharing limited to contacts can stop attackers.