It's still read-only on Android these days (there are multiple partitions for A/B stuff). Root can modify it, true, but I don't think anyone is storing any secrets on there.
With file-based encryption on the data partitions, Android hard resets should make all files inaccessible even if they're left on the drive.
With file-based encryption on the data partitions, Android hard resets should make all files inaccessible even if they're left on the drive.