I didn’t say that, not sure what you’re arguing against?

The idea that it’s in any way easier to monitor for your targets ordering new phones, then covertly moving personnel into that specific shipping facility, having them find the package, open it, flash it, close it and sending it back on its way while hoping they don’t install a new software update, compared to going to a company and saying “deploy this update to that phone” makes absolutely no sense, but you do you.