From the article: > Threats: Physical Access -> Mitigations: Protected Storage - Secure storage (that is, encryption of data-at-rest) for data contained on the

From the article: > Threats: Physical Access -> Mitigations: Protected Storage - Secure storage (that is, encryption of data-at-rest) for data contained on the device From https://securephones.io/main.pdf https://securephones.io/main.pdf > An attacker who can logically gain access to the memory of a device following boot and first unlock can directly access encrypted data and keys. To (over?) simplify things: If you have already unlocked your phone at least once, even if it is currently locked (which is probably >99% of the time) your phones data is not protected as these repeated statements of "your data is encrypted at rest!" imply.