Wrong. While those systems are, in fact, more hardened than regular Android, they can all get infected. So even if the device has iOs, or GrapheneOS, there’s still the human (read: “user”) factor. And the human factor (on the OPSec side or the user side) will always be the easiest part of the equation to exploit.