I say it in the FAQ, but it's just vanilla LEDE, and the mobile app uses the JSON-RPC API to communicate. The mobile app isn't open source, but the everything on the device is in UCI, cron, and /etc/openvpn.

The magic isn't in the device, it's in the flashing and configuring it for non-technical people.