You lot are probably all over this by now, but in case you missed it: https://www.fsf.org/blogs/community/replicant-developers-find-and-close-samsung-galaxy-backdoor