I work in the infosec space and we have tier-1 mobile carriers as clients, no FUD here. As much as I hate the huge carriers for their shitty business practices, I do want their users to be secure! I tried to package the information for the layman in my first comment, but I should've at least included a source, you're right.