You need `ss -Ml` if your server isn't actively serving MPTCP clients.

I was vulnerable myself by using Caddy (although MPTCP is not a prerequisite).