iOS and Android juice jacking defenses have been trivial to bypass for years

A research report details "ChoiceJacking" attacks where a malicious USB-C charger uses USB Power Delivery data-role swaps and emulated input devices (USB/Bluetooth keyboards) to autonomously accept prompts and pair with a phone, then switch roles to become the USB host and obtain file read/write access; the technique succeeds across most tested Android and Apple devices in about 25–30 seconds and bypasses prior juice-jacking mitigations.