you think de-googled devices running Grapheme OS have this same problem?
Not the same problem entirely, the different layers have to work together to make it easy and automated. But I wouldn't rule out some undocumented features that the real pros could use manually if they wanted to. Putin uses a typewriter, they say. Because he's seen first hand what the best of the best can do.
Correct.. no matter how you try to encode logical constraints to achieve security in software, no amount of logic can prevent the exploitation of logic.