> invalid assumptions in iMessage taking content from the network (though at least it's objective-c so it's a "DoS" rather than RCE)

In this case. In general, however, Objective-C can often fall victim to attacks where poorly validated attacker data ends up causing RCE: see the entire reason for the existence of NSSecureCoding.