Re: "We all want to see hard proof—" No, we don't.
In your analogy, being injected in the toe is as lethal as being injected in the jugular, because they both flow to the heart. In reality, the "heart" is the security services infrastructure. How does their information flow to my phone so that the "injection" can poison it?