So blocking TLDs should have prevented it, hopefully?! Anyway, I make sure to uninstall or disable all apps I do not use, Gemini does not even work on my Samsung, it is disabled, but if enabled, it fails.
Nope Maybe some WhatsApp settings change that blocks interactions with accounts that are not in your contact list would, or would not help.
I wonder if all victims had Samsung Message Guard not enabled? https://docs.samsungknox.com/admin/fundamentals/whitepaper/samsung-knox-mobile-security/application-security/samsung-message-guard/