The security measures do not need to be perfect. As long as fraud remains at a reasonable level it should be fine.

Agreed.

Full disk encryption on a device you have full control of is sufficient.

Containerization helps if you install untrusted apps.

Not having root helps if you install untrusted apps (either vulnerabilities/exploitable or malicious) as root.