When you run an android phone with an unlocked bootloader one of your main security concerns has to be physical device security.
Even while your data is encrypted, on Android your OS is not and therefore someone with physical access to your device can trivially inject malware that runs with system permissions.
Same is true for the kernel of your notebook and desktop computer when it doesn't run "secureboot" or a comparable security measure.
Follow
@sheogorath In long term the solution is supporting open hardware such as Pine64 and FairPhone with open-source solutions for secure boot like http://efidroid.org/
