Arch patched the vulnerability, yes. Dotfiles don't change that.

<animation of DHH in a race car driving bits and bytes to Linux machines>