The article, and other comments in this thread (mentioning "baseband" etc.) suggest that encryption on the phone can not possibly work.

Closed-source code on a lower abstraction level could read the plaintext I type on the keyboard before it reaches your app. That code can apparently also "phone home" on its own term.

Thoughts?