I have read a couple posts about the phantom usage. Below are the comments from 2 different posts/users:
"The phantom usage is seemingly down to a bug in the baseband that keeps it from closing network connections properly. The new baseband in 5.1 beta 3 seems to have fixed this bug."
[same issue as above]
"Snitch connection to push.apple.com is too aggressive and prone to hang ups with socket open. The push.apple.com connection in netstat transmits most of the i-services - anything from find my phone to diagnostics. The problem is - it's very aggressive and often trips and stalls, especially if you are moving between data masts while it's transmitting. This results in the phone aggressively polling all possible backup connections and even mast jumping - as a result the phone doesn't properly sleep, often gets warm from background services trying desperately to request data connection through another mast and phantom "usage" stats grow when phone should be sleeping."
[Another apparent issue]
"When you enable wifi, push.apple.com connection always stays on 3G. When you enable wifi, the mobile data radio doesn't switch off. Not unless you manually switch it off. So basically - switching to wifi to save your battery, might result in bigger battery drain, because now you use two radios instead of one. It also means kb of data leaks from snitch connection when you're abroad."
The above "hang" seems to be what a lot of folks are describing and explains how it starts all of a sudden. Restore seems to fix because if your problems are caused by the bug in the baseband the software restore fixes it for a while. Hopefully this will in fact be addressed in 5.1 and soon all will have better more stable results out of your iPhones with iOS 5.
Again just something I have read a few places. I am certainly not that deep into iOS to know myself. Just thought would pass along a little glimmer of hope.