Yes, refurbished phones can be hacked or harbor spyware but so can brand-new devices. The real risk isn't the "refurbished" ...