Well, unfortunately jailbreaking "fixes" the problem by ruining code signing integrity on the device. Ideally, the jailbreaks would leave code signing enforceme

Well, unfortunately jailbreaking "fixes" the problem by ruining code signing integrity on the device. Ideally, the jailbreaks would leave code signing enforcement in effect but just augment the default trusted CAs/CDHashes. I'm disappointed that AOSP never gained the code signing framework that iOS has, allowing people to have better Freedom and Security simultaneously.