[ratg13]

option four, they used pegasus or similar to takeover the device with a 0 or 1-click installing memory resident malware

[monerozcash]

That's exactly the same as option three.

[ratg13]

With zero-click exploits you do not need access to the phone and it does not need to be unlocked.