This should be renamed to "Telegram right to left vulnerability"

This is just not an RCE. It's just pretty good phishing.