Reposting this here since it’s been a minute, but it’s definitely still relevant. New Clickfix variants are moving on to Win+X instead of Win+R.
As @BadSamurai would say, the ideal is a “low regret” mitigation. The recommendation here fits that requirement.
Basically, Microsoft’s recommended action is too high-impact for most orgs, but there’s another way.