Hmm that's a good point, I had not considered the shared memory architecture of the Qualcomm chipsets. That said, given that using AT commands usually require

Hmm that's a good point, I had not considered the shared memory architecture of the Qualcomm chipsets. That said, given that using AT commands usually require enormous amounts of (potentially insecure) string parsing I wouldn't be surprised if there are vulnerabilities to closed source blobs even over USB. That is to say, the reverse engineering on the Android side could improve the security posture (or it could also make it worse!).