[valenterry]

What if the phone is fully compromised?

[tialaramex]

What about it?

If your threat model is "People fully compromised my phone" then you should definitely not rely on the phone in the face of that.

[kmonsen]

Is there any realistic scenario that protects against a fully compromised phone/computer?

[valenterry]

I mean yeah, if you use 2FA and both phone and computer are just one factor on their own, then a compromised phone does not matter. So my question is, how about the mentioned scenario - to me it seems that just compromising the phone would compromise the whole, but maybe I misunderstood.