The only way I can think of that could work is if an attacker made a website (and convinced the target to visit it) that said something like: > Tap Aa > Disabl

The only way I can think of that could work is if an attacker made a website (and convinced the target to visit it) that said something like: > Tap Aa > Disable Lockdown Mode to view News Org secure content Similarly to how malicious Word docs get users to enable macros.