Why it matters: Zero-click spyware sold to domestic agencies signals that offensive mobile exploits are becoming normalized tools of everyday law enforcement, not just spy agencies. It also puts pressure on Apple and Google to keep patching the exact vulnerability classes these contracts depend on, since every acquisition funds demand for fresh exploits.