The officially registered company in my country sells feature phones with build-in trojans for years, and I can't make the government agencies do anything about that, or the shops to remove at least a known-trojaned models from the retail stock.