About a decade ago I worked for T-Mobile on a very similar product. I would be surprised if they used any security considering during my time there, they would commonly ship hackathon projects as-is.