Seems like the only mitigation I can think of is to only message users you trust and do not let anyone find you by phone number or username.