The true scary portion of this world is not even being sent an SMS/clicking a dangerous link, for a while people were getting infected without ever clicking anything
To me the most interesting leak/investigation that can come out of NSO is what happens once a 0-day is patched, is there downtime? do customers need to wait for a software update? is there automatic rotation of exploits?