You're replying to someone other than me.

However any mobile OS advertising itself as 'private and secure' is just lying if it is installed on a handset that hasn't dealt with the baseband issue - and none of them have or likely will.

Are we talking about binary blobs for the baseband processor?

Baseband processor on most phones can access RAM/storage/IO at will even if the phone is "turned off".