[aborsy]

The NSO could get root on anyone’s device knowing only the phone number.

If NSO does it, so could the intelligence agencies of dozens of countries. Looks like a hopeless situation, where a small percentage of population have access to anyone’s data (but not conversely).

This is posing a threat to the democratic society.

There ought to be a way to make a secure device.

[hnthrowaway0315]

I think one way to add the difficulty is to conduct everything offline. Since they don't have a full profile for you online, they have to mobilize field teams which are scarce and expensive. On the other hand, if they can sniff you online, it's going to be automated and almost free.

But again, maintaining an offline life could be very tricky given that the society as a whole is moving everything online. For example, if you earn salaries like me, there is no way to avoid a bank account and a mobile number.

[Jerrrry]

This is correct, and why many lawyers do not maintain online presences, and do not conduct business online, in any capacity.