option four, they used pegasus or similar to takeover the device with a 0 or 1-click installing memory resident malware
> With zero-click exploits you do not need access to the phone
The whole point of the exploit is that you get access to the phone.