Some time ago, I cloned the ESN of my SPH-A680 onto an identical model (using QPST). When they were both on and next to one another, calling me made them both ring, and simultaneously answering both let me hear audio out of both.

I doubt basebands have really changed - it's a culture of security through obscurity, with people unaware of the details assuming they actually provide their purported security guarantees.