Also it’s not just the app — it’s the fact that the app is running on unsecured private devices in unsecured locations.