It’s only bad if it happens to you. Chances are good it won’t. Natalia has details:
In short, AirDrop has a flaw, a vulnerability, that in the right circumstances– you are near a hacker who knows what to do to exploit it– could disclose information about your device.
A vulnerability does not an exploit make.