Operating systems are the systemic risk to crypto.

If compelled by the state…Apple, Google, and Microsoft can backdoor billions of devices through software updates to scan for private keys.

The capability exists.
https://www.theverge.com/2022/12/9/23500838/apple-csam-plans-dropped-eff-ncmec-cdt-reactions

Things that need to be the default in crpyto:
1. Open source software
2. Airgapped hardware wallets

These are both necessary (but not sufficient) to maintain a reasonable amount of safety from backdoors.