Comment by miohtama

"In a normal scenario, a bad actor cannot gain an ADB connection."

It depends on how you define a bad actor.

"rootless privacy tools based on Shizuku."

It's not for the security of the owner; it is for the security of the government.

Trusted execution environment applications like the EU Digital (Identity) Wallet, or whatever they will demand next to protect the children, heavily rely on the fact that users cannot mess with their devices or install unsanctioned software. We all know how badly the Intel SGX story is going.