"With proper opsec" is doing a lot of work here, and I would presume one very fundamental piece is it is only to be used for non-sensitive conversations. Unless you are going to argue sharing attack plans ahead of the attack on a personal device is okay, which seems absurd on its face in a post-Pegasus world.