How are the carrier locks implemented today? I assume it must be implemented on the client (phone). Do the carriers work with all the phone manufacturers to have them add this capability?
When a carrier orders lots of phones, the manufacturer would customize the built in software to some extent (how much depends on the manufacturer and the order size)
