[owl57]

Can one use pinephones to collect these blobs, and then try to run them on Android simulator or whatever for more specific knowledge about operators' practices?

[megous]

It's quite modem specific. You'll get more information just decompiling them.