Wouldn't that API then just give someone else (presumably the intelligence agency) unrestrained access to all phone lines? Someone outside should be responsible

Wouldn't that API then just give someone else (presumably the intelligence agency) unrestrained access to all phone lines? Someone outside should be responsible for providing access, you can argue Huawei shouldn't have been chosen but I find it hard to blame them for doing their job.