[gjsman-1000]

Except for physical attacks. No root of trust means that if your phone was ever stolen, installing a PIN guessing app is easy. Extracting the encrypted data for attacking it elsewhere is also easy.