Better hope that the factory manufacturing this device, and the technicians installing it within the phone, are trustworthy enough not to leave their own backdoors.
A supposedly trusted device that taps into the hardware buses by design is an excellent target for malfeasance.