It’s not just the evil maid but what happens if your device is stolen (or scanned by the police), or you run malware by mistake and want to restore it to a trustworthy state. Most people should worry about those more than the evil maid scenarios.

The police regularly have zero day tools available like pegasus and celebrite. It doesn't really protect against well funded attackers.

Notice how those tools don’t have perfect coverage, often don’t support fully patched devices or only work with e.g. short PINs, and in high profile cases it often takes months to crack iPhones? Nobody said this is easy but it’s a lot harder than it used to be.

None of those scenarios matter to me:

- I can't prevent the police from pegasusing my device.

- I haven't have anyone infected by a malware in years, no matter the brand of device.

- Most thief won't be able to do anything with any of my devices, no matter the brand. They are not very smart, and can't deal with a bios password, an encrypted disk or even simply a locked smartphones. They steal it anyway, and throw it away when it fails.

But in the end, I don't optimize my life for the rare occasion of being stolen.

I optimize it for my day to day problems, like being able to use my machine to do what I want to do every day, without having to hope I'm allowed to do it by corporations.

I'm much more worried about the state of society that losing a phone once to a thief.

This is why I said “most”. People here are freakishly unlike the average user and I think it’s quite reasonable to optimize for 95% of the market.