You're totally missing my point. It's not that I can't know, it's that I don't care. You can't secure a phone against nation-state actors, so don't try. Do enou

You're totally missing my point. It's not that I can't know, it's that I don't care. You can't secure a phone against nation-state actors, so don't try. Do enough security so that the random person who steals your phone to sell it doesn't also steal your personal photos and bank info, order stuff from Amazon, use your phone to call their Uber, etc. They're more likely to be who has your phone anyway. Re-read the bottom of my other post, security is about balancing cost of mitigation against predicted impact of threat. State actors are very unlikely and very expensive to mitigate. Petty theft is more likely and cheaper.