Is it productive for anyone here to track down the apk and look at it (and disclose findings)? This seems like an instance where the infosec community shouldn'

Is it productive for anyone here to track down the apk and look at it (and disclose findings)? This seems like an instance where the infosec community shouldn't shine a light on bad crypto. Let ISIS use (potentially) bad crypto if they want. Leave it to government(s) to identify and exploit weaknesses.