That seemed to match the lightbluetouchpaper description - the "hack chip" goes where the optional legacy (non-quad) SPI chip would go.
But... why put it on an unpopulated footprint. Why not just replace the original Quad SPI IC with a backdoored device?