Agreed, basically all phones having exploits that NSO has discovered and have yet to be patched by the owner of the phone are vulnerable. I think Apple's lawsuit against NSO is still in the courts, they mention a specific exploit that has since been patched.
https://www.apple.com/ca/newsroom/2021/11/apple-sues-nso-gro...