It says they don't authorise carriers to install it. But do carriers need authorisation? If the consumer never knows it's there, is there any risk to the carr

It says they don't authorise carriers to install it. But do carriers need authorisation? If the consumer never knows it's there, is there any risk to the carrier? To put it another way, what are the consequences if one installs something that is "not authorised"? They mention the Blackberry Enterprise Server admin. Who would that normally be?