There are three main categories of entry into a device via zero-days: WhatsApp/Signal, SMS/MMS, and Firefox/Chrome/Safari. If these can be isolated, entering a device could become harder.
replies(4):
Edit:
Something like this, but for phones
https://learn.microsoft.com/en-us/windows/security/applicati...
(Microsoft and security are distinct concepts, btw.)