I think this only shows the insanity of FCCs statement, as the Broadcom firmware _is_ locked down and got hacked either way. If somebody wanted to transmit arbitrarily on this bands he or she could just use regular SDRs.

Or even just build a transmitter.

Although there's FBI written, that def just invokes calls of profile() which is probably to profile the certain parts of the bootloader. I doubt that being a backdoor, only clue would be the name, and that would be rather easily hidable.