If your phone is not locked, and it's physically compromised, then you're hosed already. If this is something you care about, you probably should lock your phon

If your phone is not locked, and it's physically compromised, then you're hosed already. If this is something you care about, you probably should lock your phone, and keep it physically secure. If your phone is locked, and there aren't any available root exploits for the system (why is why I'd agree with tytso about getting an unlockable phone -- less incentive for the community to collaborate on what are essentially weaponizeable root exploits) then a physical compromise that installs a persistent rootkit must wipe the device beforehand. (Which gets rid of your data, and is easily noticeable)