Sure, industry learned that exposing ports is dangerous. But they apparently didn't understand the deeper risk of trusting the network. Cellular baseband is po

Sure, industry learned that exposing ports is dangerous. But they apparently didn't understand the deeper risk of trusting the network. Cellular baseband is poorly secured, and it's privileged over userland. And its firmware is a closed-source blob, so it's ~impossible to fully assess the risks. And so it's arguable that adversaries can pwn smartphones through baseband. That's the analogy to Windows XP machines. Windows Firewall was just a stopgap. What helped most was going from dial-up modems, which are no more secure than network interfaces, to modem/routers with NAT firewalls. So smartphones ought to have discrete cellular modem/routers. And that's an easy option for the PinePhone, given the kill switch.