Carriers can actually send arbitrary AT commands which are more or less arbitrary modem commands. Depending on how deep you think the integration between the broadband controller and the CPU are they could potentially also do much more. I wouldn't trust much on any phone.