Thanks for this! I recently had a freakout about security reset all my primary account passwords to one's that can't be brute forced. Didn't consider the phone exploit however. That's something to consider.