I think they mostly targeted font/image/url parsing which are used across the OS. iMessage was somewhat privileged at some point in the back but was compartmentalized later and media processing was the only escape, but that’s out of process now too I believe.