I would be very surprised if something as complicated as Android phones didn't contain anything that can be back doored.

Obviously that is Google's problem, but I haven't seen Google (nor Atlassian in this case) claim anyone else is to blame.