This should be put into perspective: The default vimrc configuration file disables the modelines option and contains a warning that it is a security risk. I.e.

This should be put into perspective: The default vimrc configuration file disables the modelines option and contains a warning that it is a security risk. I.e. this likely only affects a small number of users and the devs have done as much as they can about a risky feature: Off by default and whoever changes the option should know about the risks. Of course it's still a valid vulnerability and it's good that it's been found and fixed. But it's likely not a big deal.