Huh, but then it's neither remote nor zero click if you need to locally install malware?

Or did I misunderstand you and can you input any phone number to cause this issue? If so that would sound more like a carrier issue then a android issue to me