Ehh... we accidentally left open a way to read all your files as root (when it came out 4 years ago on the galaxy S), just like this accidental comment in the code makes the encryption vulnerable and every other backdoor pretending to be a genuine slip. It's good that later firmwares leave only sdcard vulnerable somewhat patching the hole, but dismissing it based on no evidence of it being actually triggered remotely? I'll leave my tin foil hat on