To me this reads more like a cope for Cellebrite. How about start by disabling JTAG debugging on cell phones and have bluetooth default off and power it down if not actively used? Even better prompt the user if something tries to communicate on USB before accepting any data at all. That is not a Linux problem, that is a fundamental hardware design problem. Every OS would have problems trying to create security boundaries around this. Complaining about memory safety is a new trendy cop-out. Every OS has memory safety issues.