[burritas]

A little tangential, but carriers and hackers can execute arbitrary code on your device through OTA updates with the baseband modem. It's even been done on 5G.

Which also reminds me how the NSA has intentionally crippled standards in the past so they could eavesdrop or inject code without having to go through the carrier. This means Johnny Scriptsalot can do it too.