The SMS handling process runs as root. The protocol is used for all kinds of device <--> network traffic. Developers have the ability to make these SMS messages

The SMS handling process runs as root. The protocol is used for all kinds of device <--> network traffic. Developers have the ability to make these SMS messages look however they want them to. Users have no indication when a malicious SMS is received. I think we may see some real exploits happen soon.