Isn't this just SMS "Flash" messages? That's how I was told the voicemail count worked when the iPhone came out on O2 in the UK all those years ago.
http://en.wikipedia.org/wiki/Short_Message_Service#Flash_SMS
http://en.wikipedia.org/wiki/Short_Message_Service#Flash_SMS
I guess this is a "feature", then.
Now, it makes sense that Carrier B sends control messages to user b (although a phone crashing message sounds bad, phone should reject). But, why would Carrier B forward control messages from Carrier A? Carrier A has no business messing with user B's unread message count etc. Why not drop those control messages?