Obviously most of people in comments didn’t read the article, so here is TLDR:

A shady Israeli company was found to be spreading scary zero-click spyware through targeted ads. Despite being banned from Google ad platform, they seem to simply change business entity from time to time and keep doing what they do. One of such attacks was targeted to people using StarLink, including in countries that restrict StarLink use. Attacks through targeted ads, not StarLink itself. Targeted ads are bad, StarLink users are target audience.

Public access is what is in immediate danger. Private services are safe from bots, but at risk from attacker on your network - a compromised IoT device or package on server could move laterally to vulnerable PHP services