Hacker News Reader

SMS is inherently plain text. I think a user would have to click on a link for an attack to work.

Link previews would do the trick, and let me confirm that the Google Messages app for SMS does show link previews with no way to disable them.

"Expressive animations" are yet another vector because their rendering can be exploited.

As for MMS, it is a known prominent risk.

They have developed zero click exploits before