What about the blobs mentioned before? Those are closed source binaries running as root with direct access to the hardware, like the baseband modem. It can talk to the internet without any auditing being possible.