[MBCook]

I assume he means "threats that would allow another app or actor to read your private key".

[Retric]

And ignores the threat of a stolen device.

[pbreit]

Unlike most stolen PCs, a stolen phone can be locked or erased remotely.