ATtention Spanned: Comprehensive Android Vulnerability Analysis of AT Commands
The real issue here is proprietary baseband modems. These modems contain fully functional microprocessors along with low level access to the main processor. Even if you replace your ROM with an open source one, it is usually impossible to change the firmware on the modem.