You can check the SponsorBlock FAQ about this. They do not need to do additional reprocessing

I’m prette sure they have to send the metadata to the client where an ad starts and ends. Just to make the ad clickable.

Timestamps can be calculated on the server, but maybe there will be an api endpoint that can be abused to search for the ads.

The encryption on Android devices is pretty strong, as long as you use a good screen lock you should be fine. Yes they can reset you phone, but accessing your data is a whole other level.

If I had illegal shit on my phone, I wouldn’t send it to apple servers by using an iPhone. They are the first who would comply with a surpena. I’d use GrapheneOS on a Pixel and use an obvious duress pin like 1234. If entered it wipes your encryption keys and avoids restoring your data.

And if it gets stolen, it is gone and I’d get a new one. This is the cost of having proper opsec.

Edit:

But I also think that freedom allows for more exploits.

This is a common misconception called security through obscurity

Yes, opensource doesn’t magically fix all vulnerabilities. But it is for sure way better then closed source, where you don’t have a way of auditing the code

Then why is this the subtitle:

The apps identified have since been removed from Google Play, but make sure you didn’t install one.

I just don’t get it why mainsteam media almost never reports about this.

I don’t think that most people will care

I just memeory leak and gain infinite performance /s

Does not look as nice, but is way less misleading

Ackchyually humans have 10 fingers, indexed 0 to 9

No, I tried ZQ the other day, does not work