we need to create an app development regime that does not "trojanize" apps or pirate any derivative data.

In my eyes the mobile industry as a whole has voluntarily succumbed to a supply chain attack