You don't download software onto the device. You don't put malware on. You don't put spyware on. You don't put anything on the device that will allow you, after the person resumes having control of the device, to know what they're doing or spy on them in any way.
On February 13th, 2024. See this statement in context.