requing operators to allow phone owners to update all OpenSource code, which is probably the majority of the Internet/network facing code in ios and android, could be doable.