TLDW: they didn’t “hack” the actual phone, they just used someone who has unfettered access to SS7 reroute/bridge a network deviceid and takeover for another registered device. It’s something governments do, not some random script kiddie.

It’s kiiiinda baby town frolics if you have the money and connections, but I guess this is informative for people who don’t know how it works by now. It’s like saying you “hacked” the car dealership by stealing the keys to a car and driving off with it. You just stole a car.