While nothing is perfect, newer security models do have strong theoretical security guarantees (barring implementation problems). Significantly strong enough that it will certainly stop random guy-who-is-good-with-computers. Which is the actual threat model for 99.99% of the population. Nation states have significantly more and different attack options available (eg unencrypted cloud backups, rubber stamped warrants, and old-fashioned rubber-hose attacks).