However, cryptography alone is insufficient when application-level controls fail.
We bypassed leading Android root-detection SDKs and show what that means for banking, government-ID and anti-fraud apps running on rooted devices.