I think this is the third or fourth time I've seen someone ask how they can avoid auto-downloading malicious files from the internet. I guess apps like WhatsApp or Telegram need to advertise their disabled media download more often, considering how many people don't look for that option on their own. I can understand if the user is a bit older and is not curious to try new things, but it's a surprise that youngsters also don't know about it.
People need to be more educated about such threats on Internet and know how to turn off such automatic download features. This security-wise practice can help them reducing more threats that can compromise their devices and accounts but there is another security-wise practice that is more important in my opinion.
Avoid using those applications as most as possible.
Don't install those applications on devices you store your bitcoin or cryptocurrency.
If you ignore those two steps, there is risk of your device, account and wallet compromisation some times in future. It's better to prevent it at start than relying on antivirus softwares for keeping your devices clean.