Just noticed that there were updates to Apple AirPort firmware released in December - AirPort Base Station Firmware Update 7.7.9 and 7.6.9. Seems to be addressing the KRACK vulnerability.

Currently working my way around updating 16 devices :( support.apple.com/en-us/HT208354