When I worked in the mobile industry (modems), blatant security holes to monitor all sorts of things was a requirement from the biggest operators (like AT&T).