When @-user-mentioning in a supergroup, the user mention link uses the text set for a contact, but not the public name set by that user.
It may be the serious vulnerability risk of exposing of the name of that user.
Let's say the user uses the name "Somebody anonymous", but then I add that user to my contacts and set their name to "John Smith". And now, each time I mention that user in a group chat, their name-link is displayed as "John Smith" for everyone who sees that link, but it should be displayed as "Somebody anonymous".
It doesn't depend on devise