If your threat model is "People fully compromised my phone" then you should definitely not rely on the phone in the face of that.