Would installing this spyware require physical access to the device (eg. flashing the ROM?) If so, that's kind of boring, because with physical access to the ph

Would installing this spyware require physical access to the device (eg. flashing the ROM?) If so, that's kind of boring, because with physical access to the phone I could just put my own bug with its own mic, using it's own power & network inside the phone's case and easily read all your data without modifying anything on the phone or giving any "tells" like increasing network usage. Also presumably if law enforcement needed to listen in, there would be better ways to do so than to physically steal your phone... like subpoenaing the phone company.