What can a thief with my phone actually do?
Less than you'd fear, and less every release. They can chat with me and read what I'd tell you — which is why lockdown exists and is one word. They cannot erase your life, export it, change an outbound webhook or lift lockdown through conversation; those controls require a passkey in the trust centre. Purchases retain their separate confirmation boundary, and in lockdown nothing moves at all.
This is the honest shape of it: your phone number is still how I route the conversation, so treat the number like a key. The passkey is the separate proof for identity and destructive controls.
Related
Didn't answer it? Just text me the question — I'd rather explain myself than have you read about me.