Technically it is easy since they write the OS from the ground up. I wrote such a module myself as part of a low level coding class for my class project (in Linux ) and I’m not even that great at this stuff. They are pros. They have no limits to what data they can collect from your phone. The only impediment is bad publicity, but have a government demand it is great cover for implementing it.