> Since removing a nation-state rootkit is not structurally possible,

on an iPhone, DFU-flash (using apple configurator) reads NO state from the phone and overwrites ALL state. Nowhere for rootkit to live. If you are worried, do that.