Depends. Obviously when they say "secret spyware" that means it is, in fact, secret, and we don't know which spyware they're using, but as the article notes it could be Paragon Solutions.

They have a system called Graphite, but that primarily targets just instant messaging platforms. If the article is to be believed when it says it could activate your camera, that would signal to me it's more likely something from NSO Group, like their Pegasus spyware that can also access your camera, GPS coordinates, and more.

All of these are going to be reliant on zero-day exploits, essentially exploits that aren't known to anyone yet and are still unpatched. All exploits will be a little different, but when it comes to mobile spyware, we usually see them delivered either through texts, websites, or email.

Those attacks can either be someone just receiving the text (even if they don't click on it, AKA a "zero click" attack), or maybe having to actually go to a particular website with the exploit baked in, or running an attachment from an email.

Idk if there are laws around this in Canada, but mobile carriers can apparently install shit that you can't fully uninstall, as soon as you put their SIM in there. I discovered that when my carrier installed their "app center" bs on my non-carrier locked phone.