I was wondering if somebody has already dealt with this critical update:
When this critical update is activated, an authenticated user can access an @AuraEnabled Apex method only when the user’s profile allows access to the Apex class. This critical update enforces user profile restrictions for Apex classes used by Aura and Lightning web components.
From the look of it all apex classes that contain @AuraEnabled methods will have to be added to the profiles that need to access those.
Is the best approach to add the classes to the profiles? Or maybe tackle this with a permission set?