It would seem that root access to the ICX BMD’s running android 5.1.1 would provide sufficient privileges to cover one tracks, I’d assume state level attackers would have the required knowledge to do so.