This seems like a win for “civil society”. Putting a dent in NSO’s secrecy so software makers can patch against it would be a win as long as Whatsapp (Meta) publish their findings publicly and not keep it for themselves to be the next biggest threat to “civil society”. As if they haven’t done enough civil damage and spying themselves already.
Good point, however, no one should be promoting ExpressVPN as any kind of secure option in the first place. It’s owned by a person who is notorious for creating and deploying malware.