Isolate mobile phone access with dedicated sys-usb VMs:
- Create two sys-usb VMs with different templates and configurations.
- In one VM, install only software for mobile phone access (file transfer, internet tethering).
- In the other VM, don’t install anything related to mobile phones.
- Always use the dedicated VM for your phone.
- Transfer files via USB, Bluetooth, or Wi-Fi hotspot.