I heard it was far easier to hack Android instead, and exfiltrate the decrypted messages at rest, on the local phone itself.