This is a common and incorrect misconception. The network needs security, as does the applications running on it. These are different security layers, and cann

This is a common and incorrect misconception. The network needs security, as does the applications running on it. These are different security layers, and cannot be provided together. With an insecure network, even if your applications are secure, then bad actors (government, company, whoever) have a much easier time attacking your phone directly. Perfectly secure applications and an insecure network leaves your phone open to attack from nearby radios. If we assume your applications are all perfectly secure, and your phone software and hardware are also all perfectly secure, then that leaves abuse of the network as a tool to affect denial of service, spying on presence meta-data, and not limited to the carrier. But of course there are no perfectly secure applications, nor any perfectly secure phones. So keep in mind that the weak network greatly expands the attack surface from which bad actors can mess with your phone. This isn't a problem solved with layer-7 security.