The threat model behind driving Copilot from your phone: zero code-sync, loopback binds, TOTP on every connection, and a pinned wss hop that fails closed.