Just turn on Lockdown Mode on iOS. It was designed to protect against exactly this. It has been confirmed that if Lockdown Mode had been on, this attack would have failed.

Disable iMessage and don't use iCloud at all, for a belt and suspenders approach.