the exploit is not related to taproot
Discussion
without the upgrade masquerading jpg's in "datacarriersize" wouldn't be possible (afaik) and that's prett much what Ordinals do by obfuscating their spam inside OP_FALSE and OP_IF patterns instead of using the standardized OP_RETURN. Knots v25.1 has the potential to fix this.