A system designed to let carriers remotely install software on phones, or change their settings without a user noticing, is open to abuse.