Apple compiles the baseband firmware itself, they have control and it’s really doubtful they’d allow the network to just listen in. This is more likely about the use of spyware that is installed on the phone using vulnerabilities in the OS.