Before I go completely grey here, I'll clarify as a decades long user of vim/neovim: no software should be so near and dear to your heart that you get complacent about the risks it poses, most especially security risks.
Heartbreak at this announcement means you were assuming it wasn't a vector for security weaknesses.