I think OP may be onto something real, while you are definitely right if we translate concepts directly. But maybe the challenge, with current platforms included, is because we try to cram identities by reference. If a phone had its own identity, with which you transact as with any party then lots of the security concerns would dissolve. To tone down crankiness, I refer to identity in the technical sense, not personality etc. This doesn’t solve the challenge but it might point to a different foundation for a security model.

If the phone injures or defrauds you, does it have to make restitution? If so, how?

'Transacting' requires not only identity but accountability, a completely controlled-by-you phone cannot meaningfully transact separately from you.

> If a phone had its own identity, with which you transact as with any party then lots of the security concerns would dissolve.

I feel like a lot of new security concerns would be created.