3 ms·

As long as you use the phone they have the chance to access the sim card and be able to upload and run any code.