They don't need a backdoor. They can push whatever update to the OS they want. They have a front door.