> It feels so ridiculous to me that a total stranger can send an iMessage message to me, including some attachment, and my phone will process that message in the kernel.

ridiculous ?

Some good years ago, maybe. Since then, it is business as usual.

As long as the majority believes that Apple is secure, nothing to see here. /s