TLDW: There is no expectation of privacy when using your phone re: calls, messages, even your location. Hackers can gain access to it all and prevent these from getting to your phone without you even knowing it.

Use internet-based apps for messages, 2fa and calls like signal, telegram, WhatsApp etc (not endorsing any, just giving examples). The location hack is NOT based on gps so disabling it doesn’t protect you either. You’ll have to leave your phone behind, or power it off to be safe.