that is the safest scenario, as safe as non-lineage android can be. they can't mount your encrypted filesystem and get shit off it as it's BFU.

the unlocked bootloader people are referencing plays no role in this setup, as all they can do with it is potentially install shit that will get at your stuff after you unlock it. naturally, that phone get tossed and never used again.

two points:

• the xkcd wrench comic
• compartmentalization