VPNs fix this: 0-click attack to get a Discord/Signal user's location by sending an attachment