Do you mean manufacturers of RTLSDR devices? Those don’t need to be locked down (in the US), as they are receive-only devices.
The ECPA was always a complete legal atrocity, and I don't think it's been enforced for many years, and cell phones no longer use NBFM or anything else that an unauthorized receiver can decode, but...