Well, to me that sounds like it would be a very juicy target for other nation states. Country A does not like country B, country B is known to often use these d

Well, to me that sounds like it would be a very juicy target for other nation states. Country A does not like country B, country B is known to often use these devices and many of their "victims" are persons of interest for country A's intelligence organizations. Those people know it so they don't travel to country A or take special precautions, but because country B is friendly, they don't do the same things. So country A puts the exploit to couple of people's phones and they travel to country B. Country B scans the devices and now the only issue country A has now is how they will exfiltrate the data without raising alarms.