I mean the proposed mitigation is just common sense and should have been enabled (i.e. the feature disabled) anyway. Generating a "link preview" involves invok

I mean the proposed mitigation is just common sense and should have been enabled (i.e. the feature disabled) anyway. Generating a "link preview" involves invoking some sort of browser engine to some degree, so "has a zero-day vulnerability" is virtually guaranteed to be true, whether or not you have a report of a concrete exploit.