An analysis from Google TAG shows that Android zero-day exploits were packaged and sold for state-backed surveillance.