Phone security should be such that nothing can connect or do anything on the phone unless the user allows access. Even for maintenance purposes, it should involve a physical key or something so that charging isn’t potentially giving access to anything on the phone. And have the phone pop up a notification when a connected device tries, so that this can be confirmed. Maybe even have phones give access to a sandbox to see what connected devices are specifically after.

Though I do wonder if the average user would care if they plug their phone in their car and it tells them their car is trying to access their contacts, messages, and browser data. There’s probably a non-trivial amount that would respond by trying to give access because it must need that for a reason.