Note that the initramfs is stored without encryption or signing. So while your data won't be leaked when your phone gets stolen, it should be considered compromised if you get it back.
How does flashing work, who controls the writes? I remember reading about hacking the controller of an SD card to override the read/write functionality.
I think if the bootloader is overwritable, it could lie to you about reflashing the boot partition...
