People keep yelling that smartphones are insecure, and I wouldn't necessarily say they are wrong when your adversary is a TLA, but they are much safer than desk

People keep yelling that smartphones are insecure, and I wouldn't necessarily say they are wrong when your adversary is a TLA, but they are much safer than desktop computers. If you look at what a modern exploit kit is targeting, it is most certainly not mobile devices, it is very much desktop browsers and plugins. They have far less malware than desktops, despite the scare tactics about how much malware has been in app stores in the past, this has largely been resolved in reputable app stores. Partly because app stores actually let companies examine the software online before people install it, so now there is malware scanning for every single thing you install. But mostly because these devices have enforced permissions models where users will get suspicious if a random app wants to read your SMS messages. Sure, a determined adversary can hack your phone, but they can hack your desktop too, and that's exactly what they're doing.