Baseband blobs are isolated with IOMMU (at least on GrapheneOS https://grapheneos.org/faq#baseband-isolation https://grapheneos.org/faq#baseband-isolation, but

Baseband blobs are isolated with IOMMU (at least on GrapheneOS https://grapheneos.org/faq#baseband-isolation https://grapheneos.org/faq#baseband-isolation, but maybe that's also true for stock Pixels idk) and Google spends a lot of effort on baseband security: https://security.googleblog.com/2023/12/hardening-cellular-basebands-in-android.html https://security.googleblog.com/2023/12/hardening-cellular-b...