An update on this, there is a fix coming that will also be tied into this issue https://support.advancedcustomfields.com/forums/topic/acf_form-security-issues/. I see a new class that will be automatically instantiated. acf_form() and acf_form_head() will be wrappers for methods in this class.
I’m not 100% sure what going to be done about the security issue, I’d keep an eye on that thread.
