That they can do it means they have a backdoor. It doesn't matter if it takes a day to write the code and flash a build to use it — that it is significantly easier for them to access data on the device than it is for anybody else means they have a backdoor.