Yes, and that's a broken behavior.
> This is a thread model of many people in many countries today. Sorry for stupid question but is there a usable phone that is more secure, seriously?
No it's not a threat model of many people. I'm not even aware of such an attack existing publicly, please link relevant media articles of past attempts, including on Android. Targeted attacks go for the software because it's easier and doesn't leave a trace.
> Sorry for stupid question but is there a usable phone that is more secure, seriously?
Publicly you have GrapheneOS, privately you have security firms providing secure systems for high profiles which are targets.