Unless you have access to a mobile phone's baseband source code, you cannot really trust anything about its level of security.

This was discussed on HN a while back and comes up quite often:

https://news.ycombinator.com/item?id=10905643