Despite the hype, iPhone security no match for NSO spyware (washingtonpost.com)

Sincere question: I haven't delved into the details. Are these all likely to be exploiting memory safety bugs? Or is there another class of vulnerability implicated as well?