Yes that's why I run GrapheneOS, Google is very capable of inserting its own backdoors