so, the "ZOMG VULN IN OPENPGP" has precisely fuck-all to do with pgp

it affects certain buggy email clients and only if they have html rendering enabled

so, if you have that disabled like everybody's told you to do for years then you're fine