Following up with D112670, it appears that the original fix was insufficient: it's not possible to use __attribute__((format_arg)) on methods that return instancetype in NSString when instancetype is sugared, as this breaks pointer equality. Although this is only possible in limited scenarios because instancetype is a contextual keyword, it can (crucially) be combined with nullability qualifiers.
rdar://85278860