Re: Just like to point out..
"A timely reminder that this stuff is written by journalists, technical journalists, but journalists all the same."
That's right. Journalists who put this paragraph in the article:
The bug is technically present in Debian Stretch (aka Debian 9), Buster (aka 10) and Sid (aka Unstable), however "systemd-resolved is not enabled by default in Debian," according to the project's Salvatore Bonaccorso, so either you have nothing to worry about, apply the patch yourself, or hang tight for the next point release.
It helps to read the article as well as the comments.