At least the BSI in Germany seems to think it’s serious enough to warn people about it (sorry, no English language link for this): https://www.heise.de/mac-and-i/meldung/Mail-Bugs-BSI-warnt-v...