> How can we be assured this can't be done for a phone that is set up, in my pocket?
In that case the phone would already be initialized.
