[gruez]

>2: E2EE doesn't insulate you from baseband vulnerabilities. You can think of a modern phone as having two processors, though in practice it's many more, think of the Application Processor (AP) and the Baseband (BB). The AP is basically the CPU that user code runs on. The baseband (so called because it deals with the radio signals once they've been downconverted from their broadband modulations) is sort of like a NIC, it provides connectivity to the main CPU.

The situation is somewhat better now. iPhone's modems are separated from the main CPU and communicates with it using some sort of serial link, and AFAIK tensor based pixels have modems isolated using IOMMU.