Thankfully, the Pinephone community has stepped up and made a FOSS firmware (mainly biktorgi, thank you!):
https://github.com/Biktorgj/pinephone_modem_sdk/releases
It still uses the ADSP from Quectel, but from my usage (and from other's reports), it is FAR more stable than the stock firmware. It is also immune to this vunerability (I don't even think it has atfwd_daemon).