“After doing some digging your security is at no risk. Pegasus does not affect macOS Mojave.”

Link. Would explain lack of Apple concern given magnitude of the Messages.app bug. If true good news for Aperture users.