Do you need to connect to actual celltowers tho? I know legit SIMs are a kind of a barrier, but then…
Using a portal through KZ to an UA endpoint via VPN\proxy, faking geoloc and other identifying stuff on your device.
For me, it sounds like enough, and a collaborant is only holding an exit node that is easier to defend in court than having all infrastructure at their place.