[okdjnfweonfe]

its not exactly a 0day if the ISP is communicating (through an intermediary) to a card the ISP gave you, that's just normal, unexpensive

And this is like, literally a state actor installing an app in this case?

[fragileone]

In this case it requires the presence of Google Play Services. I'm unsure if there's any evidence that they can install apps without it being present.