The vulnerable app can be anything that displays an attached image though. And a 250-mile radius compared to the whole world is still a very significant step for governments trying to track down dissidents, etc.

The section on responses by Cloudflare, Signal and Discord is disappointing. They’re not taking it seriously enough.