One straightforward idea: Once the phone is unlocked (e.g. by pin code) allow the user to authorize the new hardware.
I don't think most users are capable of auditing their generic hardware to be sure it is free of backdoors.
I don't think most users are capable of auditing their generic hardware to be sure it is free of backdoors.
Since the phone has to already be unlocked for this privilege to be granted, it can't be used to bypass authentication.
The hardware is already installed by this point, so if it's 'spying' it can do that. The user's choice has no impact on the hardware's ability to record and/or deliver information.
At best, the replacement hardware would be able to unlock the phone for the attacker at some later time. However, the cost of getting this customized unlocking device into the phone seems high given that the attacker needs physical access to the device to embed the hardware in the first place, and then again at a later time to get into the device.