The earliest I know of is it's possible to unlock the bootloader and flash the operating system with a malicious one