The Acme Wizard Phone using Android 8.0 was stolen by an attacker and even though the device was encrypted, the attacker was able to read the names of the encrypted files. Why?

The correct answer is that metadata encryption, which would prevent an attacker from seeing file names, was introduced in Android 9.0 and above. Since the device was running Android 8.0, this security feature was not available, allowing the attacker to view file names even if the file contents were encrypted. The other options are incorrect because: "The OEM did not implement encryption on this version of their device" is unlikely. Device encryption was a standard feature in Android 8.0, and most OEMs implement it. "The user disabled encryption on their device" is also unlikely. On modern Android devices, encryption is typically enabled by default and difficult for a regular user to disable. "They can see the file names because the device had the TEE encryption turned off" is incorrect. TEE (Trusted Execution Environment) is for secure operations, not directly for file metadata encryption.