http://motherboard.vice.com/read/the-black-market-dealers-se...
http://www.zdnet.com/article/invasive-phone-tracking-new-ss7...
The NSA and GHCQ, among others, were constantly reviewing the phone standards for use in secure products + SIGINT obviously. The were putting experienced breakers and security engineers on it, many with extensive COMSEC background. The phones their defense contractors produced had few to none of these weaknesses depending on security vs usability tradeoff. Many private suppliers, who sold to governments, did the same. The internal presentations whose details leaked in various papers around government programs and defense products also showed they consistently knew risks of transmission mediums. It's actually the only form of security they know through and through down to emissions of analog components. They mastered it decades ago with only real challenge being people wanted benefits of insecure phones. :)
Then, they not only allowed these standards but endorsed them for the general public and businesses. They also made it illegal for us to buy their Type 1-secure phones or TEMPEST-certified devices. That last part is how you go from "were they just incompetent?" to "they're deliberately keeping us insecure to enable SIGINT!" If they say it's to stop reverse engineering, then ask why the recent devices are supposed to be field releasable where enemies might pick them up but citizens of Five Eyes still can't buy them. Excuses getting thinner and thinner even if we never get some contractor leaking the proof we need from somewhere in Hawaii. ;)