That's nothing at all like a consumer device being offered for sale with an intentionally tweakable baseband firmware. Getting a device certified by the FCC (and equivalents) doesn't require that the baseband firmware be 100% free or 0-day exploits. You can hack certified devices in all sorts of ways but you're then breaking the law (wrt to the radio portion) and doing so completely outside a relationship with the equipment manufacturer.