But if I am in Airplane mode (or generally without any signal) why would it bother? Unless it checks a locally stored token for validity, which would be exploitable; but even so, a local check should be near instant.