Re: Chinese law
The RAN is radio - analog. The intercept tap point would need to be on the RAN.
Packet headers etc encrypted or not are after demod which is non-Huawei equipment.
So let's get creative - what would be the transport that would be used to intercept *analog* from the tap point and transfer it to china without detection?