Interesting, and ignoring the underhand hacking side of it, seems VoLTE uses SIP to set up an RTP session - there are fairly mature linux libraries for those, so it doesn't sound impossible for us to code our own VoLTE app (for audio only in most cases probably) even though our cell chip doesn't support it. Probably needs some packet sniffing of legit call setups though to make sure we're behaving in an interoperable way with the rest of the 4G devices out there, but that's just what these guys have done.