Interesting! I'm assuming this should have limited access to what requests it sends to the phone. I'm also assuming this limited access would be implemented by the manufacturer.

So my question, based on those assumptions, is: this application toolkit, as well as OS level calls would require an exploit by the intelligence agency to be able to give commands such as start the camera and stream it? I guess the barrier between the OS and the SIM holding hardware would have to be broken so that the camera could be made to stream to some random endpoint.