>do phone application operating systems do anything to protect against the device's real-time OS from being able to access RAM/Disk that's being used by the application OS? Because if that cannot be controlled security at the application OS level is meaningless.

If you're talking about the baseband, AFAIK it's already isolated on both iPhones and pixels. Not sure about other androids.