a rooted phone isn't always on custom firmware.

btt: bluebox only provided a screenshot and details to be released pa on blackhat conf end of july.
hopefully it is just FUD.