Nice write-up, flawedworld !
Agreed that "..It doesn't matter if you are the richest person on earth if you have WhatsApp installed on your phone, all your data from every app on your device is accessible, as Jeff Bezos found out in 2020. ...." is over the top - especially when GOS considered. But some of his other observations and suggestions seem pretty good.
Of course a kernel bug that you hypothesized might be readily exploitable in AOSP but not at all exploitable in GOS - though I'd still not have anything to do with WhatsApp as exploits improve over time.