CISA ordering federal agencies to patch a Samsung zero day exploited to deliver LandFall via WhatsApp is a wake up call. Devices remain the weakest link. Vendors must ship secure defaults, prioritize rapid patching, and federal networks need aggressive endpoint isolation. Security is not optional