GrapheneOS v. "Normal" Phone OS Hacking

Assume the NSA/a team of malicious hackers at the LTE carrier wanted to (1) exfiltrate data from a customer's phone, and (2) infect it with super malware (anywhere on it; be it firmware, host OS, etc.) long term.


How would they likely do this, since they would essentially have direct access to the phone? What protections and countermeasures does GrapheneOS implement against such a malicious actor in this scenario? Would a quality VPN prevent anything, in that the traffic would …

cybersecurity hacking os phone