Are they exploiting zero days to somehow force the phone to install an app unbeknownst to the user? Are they physically stealing the phone while the user is unaware, installing software, and then returning the phone?

I don't even know how spyware ends up installed on a modern phone without the users knowledge.

And BTW, the delusion:

> key ally.

LOL.