We can laugh and not click but some exploits are 'zero click':
Scary stuff:
https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html
A complete system running on a turing complete language using a flaw in a xerox fax compression format from the late 90s.
Install those security updates!