I recently found myself trying to explain @vexl 😎 to somebody, having never before needed to use it myself.
I think where a lot of people are going wrong is that they don't know how to set-up and safely use a second no-KYC phone specifically for Vexl/Bitcoin, and don't know what a Custom ROM is. This requires effort, but there are an increasing number of use cases; being Canadian, for example.
On the other hand, Vexl should almost certainly insert some suitably large sandbags (probably with large fonts and a countdown timer) before it asks for permission to hoover-up the entire contact list of peoples' phones.