This is true for any phone where you are persistently signed into your email client. The solution is a competent hardware security layer and a reasonably stron

This is true for any phone where you are persistently signed into your email client. The solution is a competent hardware security layer and a reasonably strong passcode, such as offered on recent models of iPhone. This is sufficient for normal people to thwart opportunistic attacks. Of course if your adversary is a Government or a corporation that has root permission on your device, you would obviously take a different security posture.