However, Apple did indicate that most users will never be targeted in this throw in of attack.

Apple says it will never ask you to click links, open files, or download apps.