How? Is it exploitation of hardware vulnerabilities (e.g., processor vulnerabilities), software vulnerabilities (e.g., apple's webkit vulnerabilities, google ch

How? Is it exploitation of hardware vulnerabilities (e.g., processor vulnerabilities), software vulnerabilities (e.g., apple's webkit vulnerabilities, google chrome + search JS vulnerabilities), or Wifi/Bluetooth vulnerabilities? The only way I can think to intercept prior to encryption would be Key logger, so this would require an already compromised device. Alternatively the government could force a vulnerability state (e.g., the Perseus text message of doom). Is this also your understanding?