Your exchange and wallet passwords may be stolen, use a separate phone for this type of mining.
Exchange and wallet passwords can be stolen not only by a click mining application, but you are right that a separate phone will protect the user, but not from all applications.
Miners with experience will always make multi-accounts on separate equipment.