CyanogenMod is only part of the solution: It still requires a proprietary radio stack for each phone and there is plenty of backdoor stuff someone could put into the radio code.