>ADB enabled means an adversary can completely own your device and "back it up" by simply plugging it in.

each adb host has to be individually white-listed by an unlocked device. also the current behavior is that it auto forgets any white listed host that hasn't connected within 7 days.