[zb3]

You're missing the part where government-mandated apps will rely on remote attestation which will only work on "certified" phones.

[Rogach]

I've got this covered :) I use a separate phone for these apps. So I have a "normal" phone that I use regularly and can do whatever I want with it, and a "certified" phone that has these pesky apps - and nothing else.