A mobile client may store agent prompts, repository paths, diffs, command output, and downloaded artifacts. Protecting the live app sandbox is not enough if those files enter a device cloud backup you did not include in the threat model. Start with a data inventory.
Source: [Dev.to](https://dev.to/roronoa_/keep-agent-logs-out-of-mobile-cloud-backups-on-ios-and-android-3786)