Yes. It's an arms race. To detect root, apps will try something like attempt to call su. If you're rooted and don't want the app to detect it, you can jail the

Yes. It's an arms race. To detect root, apps will try something like attempt to call su. If you're rooted and don't want the app to detect it, you can jail the app and prevent it from being able to detect it. Note that this is in theory. Almost all apps will implement root/jailbreak detection using the same crappy method, just like almost all of them use the same crappy method to detect if e.g. cert pinning is active. But some will use a very clever method that is not widely known and not well-documented. While it's true you can theoretically defeat any of these checks, in practice it (like most of reverse engineering) can be made incredible complex and difficult. For example, Facebook/Instagram have (as of the last time I checked) a complex custom system for checking if cert pinning has been bypassed, such that you can't just return-void the checks very easily.