Yes, and phones are full of vulnerabilities because vendors provide security updates only for 2-5 years (high end being rare), thus making this a moot point.
The security measures do not need to be perfect. As long as fraud remains at a reasonable level it should be fine.
The security measures do not need to be perfect. As long as fraud remains at a reasonable level it should be fine.