And you still need to trust the client. There is nothing stoppting them from slipping you a compromized client via Android Play Store update. The only way arou

And you still need to trust the client. There is nothing stoppting them from slipping you a compromized client via Android Play Store update. The only way around this would be to have many implementations - but AFAIK they don't allow third party clients to connect.