"Once installed" is operative here. Pegasus isnt a magic wand that you can swish to read all text messages on every phone. It needs to be deployed.

indeed, unless you're a target for a state or a company that cares to spend money to spy on you, you don't need to worry about pegasus