It sounds like this is just giving them the all clear to spy. Not saying how they do it just that they can

No. Phones could be shipped with spyware pre installed, or hardware backdoors.

I’d be surprised if getting past it was as simple as installing a custom ROM, for example.