> I’m curious what threat model your first two bullets are intended to mitigate. "Smishing" (aka "SMS phishing"), for a start. Then it seems to me that a phon

> I’m curious what threat model your first two bullets are intended to mitigate. "Smishing" (aka "SMS phishing"), for a start. Then it seems to me that a phone that is only used for banking apps and 2FA is less likely to be owned than a phone used for everything under the sun.