If you want to pwn thousands of apps in a single swoop, this is legit an easy way to do it.
https://cyberplace.social/@GossiTheDog/115169881407789957
I hope we see some more attacks using this pattern. It'd help people learn some lessons about pulling in libraries and trust.