1 article on this topic.
Listing an item for sale requires granting a marketplace permission over your collection. That permission is what gets exploited.