Here's a vulnerability which completely owns the phones it runs on. This is the kind of thing which a few years ago would have been the scandal that would destroy companies - the pre-SP1 Windows XP Microsoft vulnerabilities were much, much less serious than this and yet Gates saw them as an existential threat to the company.

But apparently vulnerabilities now are so common that - even when they are deliberately put in - the company neglected to pay the ~$20/year to make sure they kept access.

Additionally, for all the talk of how state-sponsored agencies are continually grabbing every resource they could, here is one where they could have taken over a large number of phones and yet failed to.

Additionally, for all the talk of how organized the PLA is.. clearly this wasn't them.