It has 100% signed firmware, which is good but this thing is really only applied at boot time which means after the phone boots up, you can login and download any binary you want and download it to the tmp-directory over tftp and execute it 