I mean, rubber-hose cryptoanalysis is still the easiest attack vector, but root exploit releases are frequent enough to be a valid concern :)