I have pulled mine apart too. I have an old one from before the tracking law and I didn't find anything nefarious. The one I have from after the tracking law went into effect is transmitting its location and ID but I didn't find much else even on a network intercept.
Maybe there is some way to open a stream to China buried deep in the firmware, but I don't see what use China would have for that. They have other methods of surveillance