The phone is always online, it connects to cell towers. So a phone malware can send out private keys to cell towers through sms to hacker.
No better just use a hardware wallet or an offline PC, or something like that.
You can install electrum, you can send transaction through QR code from offline to online. You can use the smartphone to read the QR code, while the electrum will generate it.
That is a much better strategy.