Both the hardware vendor and the vendor of the mobile phone's "black box" talking to your telecom could, of course. Potentially some chips inside could do nasty things, even if you'd install LineageOS for example.