It's by far easier to force MSFT, Google or Apple to backdoor the device rather than an individual app. Especially since at least on Android devices you can always pull the APK you got form the store apart and see if it's being messed with.