Do you really think the adtech industry is using radio firmware backdoors to track users? It's theoretically possible I suppose, but several steps too far into conspiracy theory territory for me to worry about. Governments spying on dissidents is another story.
I know Samsung snarfs everything it can from my phone. I know it wants more. I know money is key, and even pulling some info... GPS, sensors, etc is helpful.
And with full control of the OS, of where kernel modules memory space is assigned, you'd only have to scan certain buffer regions of memory, to snarf contents of buffers, etc.
The problem is, I don't know, and can't. It's not open source. It is not under my control. I personally don't care about paying, but I do about seeing.