I would be shocked if there are not vulnerabilities in the form of default codes and factory resets. As far as phreaking there's probably something to it. The fact that my building's call box picks up when I dial the front door number seems like a bad sign.

The building next to mine has what appears to be an Android tablet as the keypad, I can only imagine the vulnerabilities there.