> Huh, but then it's neither remote nor zero click if you need to locally install malware?

The software is installed on the _sender_ device.