I believe the check in the factory contract that checks if the owner of the NFT is address(0) is all the function needs to make sure that the NFT exists and that the metadata will not be served for a non-existent NFT. Overall I deem the mitigation valid.
I believe the check in the factory contract that checks if the owner of the NFT is
address(0)
is all the function needs to make sure that the NFT exists and that the metadata will not be served for a non-existent NFT. Overall I deem the mitigation valid.