I’m not a moderator by any means, but off-topic, low effort comments like these make HN a more annoying place to read through. You likely have seen some of this noise on reddit, please don’t bring it here.
I understand what you are saying, but seriously, the best way to get an exploit like this onto an end-users phone en-masse is through a third-party sdk. If a government pressured one of the companies behind the major SDK's to include this spyware as a form of backdoor, perhaps they would be forced to oblige.