PlugOS – An isolated OS that runs on an untrusted phone
The OS runs on a separate USB device.
The phone is treated as an untrusted terminal for display, input, and network access.
Similar devices like those from Ledger or Trezor have trusted inputs (buttons) and/or trusted outputs (screen) which make the whole thing work.