Imei can be changed on some phones, and are not secure. The sim card needs to be logged to from the phone (usin PIN for uset-level login), contains non readable secrets and provides a completely separate execution environment with its own memory and cpu.