NSO/Pegasus exploit uses a novel virtual machine implemented within an old school image format to escape the iOS sandbox.

Suddenly the vm-based Flare-On challenges maybe don’t seem so impractical?

https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html