Good info. I use e/OS on my old Samsung phone as a daily driver. I consider the phone to be a communication device, so have just couple of messenger apps there. All else is done on a PC so dont consider the security to be an issue. But its good to be aware of it. However, I think privacy is orders of magnitude bigger thread to a common person than an attacker spending resouces and targeting a random person. Sure, someone could attack me, but to get what? While google attacks privacy 24/7.