As a big proponent of a future Neo900mkII having VHF/UHF rx/tx chip I forgt to mention that perhaps the biggest boon to folks of the RMS tinfoil hat mindset is it would be the first mobile phone I know of with the ability to receive old school one way beeper/pager signals, a simple app would import the phone number to the dialer when you felt like firing up the GSM. Low power monitoring and encoding and decoding was done with software and sound cards back in the days of DOS.
Pager signals, which are ultra small and only need between 1200 and 9600baud, are mass transmitted repeatedly by towers in the service area, it is not possible to track people(easy to track and log with mobile phones) as it is a one way communication. In the 90s I used to take calls and voicemails by numeric pager and decide whether to fire up my mobile phone, use a payphone, or wait until I got home.
If marketed as the first real freedom phone which returns some privacy I bet it would market virally bringing down unit cost.
https://en.wikipedia.org/wiki/Pager

From my reading it might even be possible now with current hardware to do a proof of concept using the FM receiver chip possibly with the tx chip transmitting a canceling signal to receive and decode as per wikipedia:Pagers using the commercial FM band(aka 100mhz?) receive a subcarrier, called the Subsidiary Communications Authority, of a broadcast station. https://en.wikipedia.org/wiki/Subsid...ions_Authority