My Homey was affected by CVE-2020-28952.
I had added my first and only ZigBee (Aqara vibration) sensor with firmware v4, but am currently on 5.0.4.
A ZigBee reset indeed changed the network key to a much more random one (it also changed the channel from 11 to 19).
The scripts complains that I should add ZigBee routers, but I only have a single end-device that is directly coupled to my Homey (and about 5 meters away from it, on the same floor):
Please add more zigBee Routers to create a better mesh network
You only have 0 routers for 1 end-devices
Can I safely ignore this warning with my setup?
(I actually have a lot more ZigBee devices; Hue bulbs and IKEA wall outlets, but those are connected to their bridges, not to the Homey directly)